This is not true. Deleted data is indeed deleted. Making sure deleted data is actually deleted is super important to Google and any other company because of GDPR compliance.
This is the kind of thing that you go over laborious detail in over privacy design docs at Google to make sure you have it covered.
Source: I'm a Xoogler.