Deleting an account properly

It starts a process with a retention window, typically 30 days, during which recovery is possible and so is a breach. Export first, then delete, then check back later that the account is actually gone rather than merely hidden.

Strip metadata from images, search the text for names, addresses and tokens, and read the result once as a stranger would. Automated redaction misses context: a date and a place together can identify someone when neither does alone.