Do you think they'll delete your data just because you chose to lose access to it? They are supposed to in the EU, but then again, they are not supposed to use your data in this way here either.
I'm sure they'll claim that the friend has the rights to the image and the friend gave permission via a click-wrap contract of adhesion.