Why let users deactivate/delete account?

Question

Why do companies let users deactivate or delete their account?

I see this mostly for social media sites such as Twitter or Facebook. Should other sites such as ecommerce let users deactivate their account?

Because users need to have some control over their data, and deleted data can't be disclosed by a future security breach. — André Borie, Oct 07 '15 at 12:47
@MichaelKjörling Yes, exactly. Ashley Madison did not delete their users' data upon request, despite claiming that they did. — Mar, Oct 07 '15 at 16:00
in fact, Ashley Madison re-purposed locked and/or closed accounts as bot accounts; so even before the breach. — Yorik, Oct 07 '15 at 18:14
@SpaceTrucker if properly deleted of course. Facebook's deactivation has been shown in the past to leak (a quick search shows stuff from a few years ago, I think I read somewthing more recent but can't find it quickly) — Chris H, Oct 07 '15 at 20:10
@ChrisH Yah Facebook deactivation isn't intended to be a hard delete as you can (I think) reactivate your account and have all of your information preserved, which is depending on them storing your data. Not sure if you can request an actual delete not just deactivation from them. — DasBeasto, Oct 08 '15 at 17:41
@DasBeasto, I don't think you can, and not just that but there were ways of finding out about the friends of deactivated accounts which weren't possible with secured active accounts. I skimmed the details yesterday but can't remember enough to give more detail. — Chris H, Oct 08 '15 at 18:18
@ChrisH Plug "facebook delete account" into Google and get: https://www.facebook.com/help/224562897555674 — heinrich5991, Oct 08 '15 at 23:09
One factor that websites tend to forget untily they're big and old is that people die - and that has all kinds of interesting implications for their data, if it is important in any way. i.e. you may have people who are not the original user but have a desire and (possibly) a right to deactivate the account or obtain the data from it. If there is billing involved, it's probably not even an option - you have to have a process for cancelling any billing that can be initiated by someone who isn't the user, doesn't know their passwords and other credentials, but has the right to cancel the billing. — Peteris, Oct 09 '15 at 07:50
@heinrich5991, OK so complete deletion exists but doesn't delete messages from recipients' accounts -- neither does email so that seems reasonable. I was commenting on deactivation, and reported weaknesses (bugs?/features? A matter of opinion). Looking at the reports from those who try to break things is probably more instructive than looking at the howtos from those who designed the system. — Chris H, Oct 09 '15 at 08:14
Lol would you want to register and be a user on a site which gives you no option over your own data and online presence? That would be plainly horrible. — xji, Oct 11 '15 at 13:18
@ChrisH - please note the italics - I think that possibly deleting (or even deactivation while in effect) might remove your messages and comments and whatnot from at least visibility to recipients. Certainly I've seen some indications of this in past use of Fb - from both sides of the fence. I would have to research this to be sure, so take it as you will. — underscore_d, Oct 11 '15 at 14:45

Arielle Lewis · Accepted Answer · 2015-10-07T14:20:58.030

53

If you feel that people should have some control over their own information, then you should make it possible for them to delete that information from your system.

Since ecommerce sites (at least as I know in the US) have to deal with tax reporting, and in most systems if you delete an account then all reporting dealing with that account is deleted as well, allowing users to delete an account is likely not a legal option. At least not until the 7 year period for having audits come up has passed.

Based on info in the comments, if you have customers in Europe they have a legal right to have their information removed. One solution to this if you need to keep the account in your billing system for reporting would be to replace all of their information with dummy data. That way their information is no longer stored so you meet your legal requirements, but you don't lose your historical billing data.

Also consider the case of the recent Ashley Madison hack. It was revealed that a number of users were willing to pay money to have their information deleted from the site. That tells you that, at least in some contexts if not all, being able to delete an account is a very important feature. Shame paying money didn't actually delete anything.

edited Oct 07 '15 at 14:20

answered Oct 06 '15 at 18:59

Arielle Lewis

881
7
9

50

In contrast, if you have Eurpoean users, you are legally required to allow them to correct or remove personal information. Deleting the account is one way to satisfy that. – Riking Oct 06 '15 at 20:49
But deactivating users should be allowed right? That doesn't interfere with the whole tax reporting thing... – spauny Oct 07 '15 at 08:10
18

Aren't having an account and being able to do tax reporting two very distinct features? So why should tax reporting force that there be still an account (meaning something that the user can still log in)? – SpaceTrucker Oct 07 '15 at 08:23
4

@spauny At least in Italy I have the legal right of forcing you to completely delete all information related to my person from my account (i.e. name, email addres, birthday, other personal information etc). Deactivating is not enough if those information are still stored somewhere. You can surely keep around "pruned accounts", but in many applications an account without any kind of personal information is just useless and thus rubbish, so its simpler to delete it. – Bakuriu Oct 07 '15 at 12:41
@Bakuriu I understand that maybe you can force companies to delete your info (except anything related to payments) but to be honest I'm not that naive into thinking they will actually delete it... I would be satisfied even with a delete account that moves all my info to a history DB or history tables or whatever, as long as they don't share my data or keep sending me emails or sms – spauny Oct 07 '15 at 13:32
@SpaceTrucker As mentioned in my answer, in the systems I've ever seen if you delete an account that deletes all information tied to it, including any invoices/payments. If you need to keep the account, but get rid of identifying data, you can always enter dummy data. IRS doesn't care about names and email addresses, only what you've been paid. – Arielle Lewis Oct 07 '15 at 14:17
2

@spauny I don't understand what you are saying. What is good enough for you doesn't have to be good enough for legal compliance. You asked "why companies allow to delete accounts instead of simply deactivating them?" fact is: 1) there is a legal requirement to be able to delete a certain amount of information (so you are obliged to allow this;not doing so means they could be sued and lose. In Italy they could risk prison up to 3 years... would you risk it?) 2) Letting only delete partial information is probably harder then simply delete everything related to an account. – Bakuriu Oct 07 '15 at 14:20
6

Having European users doesn't create any obligations unless you also have a legal presence in the EU. Just a small clarification. – JonathanReez Oct 07 '15 at 18:50
@JonathanReez I'd like to do some more reading on this, and everything I'm finding is on Right to be Forgotten, and everything there is just about search engines. Any good links for reference? I'd like to get them in to the answer as well. – Arielle Lewis Oct 07 '15 at 18:57
1

@DoyleLewis it's the basis of international law: the EU doesn't hold legal power over every company in the world, only over legal entities registered in the EU. – JonathanReez Oct 07 '15 at 21:00
1

@DoyleLewis https://iapp.org/news/a/does-the-eus-right-to-be-forgotten-pose-a-threat-to-companies-in-the-u-s is somewhat of a reference regarding EU RTBF not being applicable to entities having no relation to EU countries. – zamnuts Oct 09 '15 at 13:06
As an update - European law is implementing GDPR, which is taking the data protection laws even further with fines up to €20m or 4% of "global" turnover (whichever is higher) available to the regulators! – RemarkLima Feb 10 '18 at 22:43

score 20 · Answer 2 · answered Oct 06 '15 at 19:06

It depends on the use case.

If a users wants to delete their account, but they can't, they might:

Create a new account
Abandon their account (never sign in again)
Pester your support with requests to remove their account

All three of these things are bad UX, and degrade the quality of a website. Specifically, in the case of Facebook, having orphaned or duplicate accounts creates a bad UX for active users. It also degrades the integrity of their social graph.

Requests to delete an account on a non-social platform are less likely. The user likely has little information associated with their account that they care to hide or remove. If an e-commerce website saves credit card information (or tokens), it should probably employ a way to disable or soft-delete an account in the event that it is compromised.

The accepted answer is good, but I like how this one dwells more on the perspective of the user and possible implications for their experience and the site itself - aside from all the (still important) data protection type stuff. — underscore_d, Oct 11 '15 at 14:50

score 13 · Answer 3 · answered Oct 06 '15 at 21:23

In the UK at least, and possibly the whole of Europe there are very strict data protection laws, with some high fines against those that go against them.

The Information Commission Office have a set of data protection principles: https://ico.org.uk/for-organisations/guide-to-data-protection/data-protection-principles/

Namely:

Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

And

Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.

If someone wishes for your organisation to remove all personally identifiable information about them, you need some very good reasons not to comply. There's nothing wrong with keeping the transactions, the amounts etc... But that'll be in your accounts and financials anyway.

A further case of the ICO and data protection in action was with Google and their Street view: http://www.theguardian.com/technology/2009/apr/23/google-street-view-data-protection-cleared

Note that the ICO are watching them very closely!

score 3 · Answer 4 · answered Oct 06 '15 at 19:42

If a user wants to delete their account, then a good user experience would be one where they can delete their account. However, there are definitely situations where it is not in the best interest of the host or the user to allow a full permanent delete.

If the account is only deactivated (sometimes called a soft delete) the host has the ability to reactivate the account in the future if the client wants to come back.
In situations where a user's contribution to the platform is valuable even if the user wants to leave, hosts may prefer to preserve the content but make it anonymous. For example, Reddit does this if a user deletes their account. Any posts or comments submitted by the user stick around, they are just no longer attributed to the user.

It's also worth noting in Reddit's case that a user can also delete their posts before deleting their account. This is especially useful if any of the user's posts contains personal and/or sensitive information that they don't want "out there" any longer. In the case of deleting a post, its position in the flow remains, but its content is replaced with simply [deleted]. — Mar, Oct 07 '15 at 16:11

score 2 · Answer 5 · edited Jun 16 '20 at 10:51

There are a few reasons why...

...depending on the nature and location of a site:

1. User convenience and satisfaction

If users sign up for a site (let's say Hong Kong Expatriate Community) and then end up no longer needing to use the site (e.g. user moved out of Hong Kong), then offering users the ability to delete or deactivate their account makes users happy, or avoids users feeling frustrated.
Likewise, if a user had a mobile phone account in one country but moved, they typically want to deactivate and/or delete their account.
Users may also want to be able to delete accounts to protect their own privacy.

2. Risk mitigation

Sites which store sensitive user information may have a commercial interest in allowing users to delete their accounts and data, because there is risk exposure associated with every account. For example, companies storing financial data, potentially unlawful user-posted information (e.g. child-porn, drug trafficking, etc), or intellectual property data are all at risk of inconvenience or outright shutdown if authorities decide to investigate, subpoena, discover, or injunct a business.

3. Moral imperative

Even if a company does not have a commercial interest in deleting an account, it may decide to offer this because it believes it to be a moral choice. For example: swinger dating sites might allow members to delete accounts if they decide to stop cheating, alcoholic recovery sites might allow account deletions to protect the anonymity of recovered users, political discussion sites might allow users to delete their accounts to protect themselves from repressive authorities, etc.

4. It's the law

Some jurisdictions require sites to allow users to be deleted. The most notable of these regulations is the European Union Right to be Forgotten framework which has attracted a lot of debate and is still under evolution. It's notable because Google, Facebook, and other internet giants have been locking horns with EU regulators over how to offer and implement user data deletion.
There are also other regions/countries looking at or implementing data deletion laws.
Some applications are also subject to deletion requirements. For example, aspects of US HIPAA require companies to securely delete patient data partially or completely. Obviously, military and government intelligence sites are often required to let users delete accounts for legal reasons.

score 0 · Answer 6 · answered Oct 06 '15 at 21:42

0

Facebook, Twitter, Quora, LinkedIn and other companies allow users to delete and deactivate their account because they might feel safer doing so. If they don't allow users to do so, their privacy would be in danger. These companies do maintain a copy of their data after deletion so that they may use it if the person is involved in something illegal.

Why would eCommerce websites allow users to delete their accounts. eCommerce websites have a very limited data of the users like name, email, address, phone number.

answered Oct 06 '15 at 21:42

1

Because eCommerce has no valid reason to keep that data, other than putting it at risk if the site ever gets compromised. – André Borie Oct 07 '15 at 12:50
1

You list data that fall, under the Czech law at least, in category of "identifying a person", and use and storage of such data is regulated by laws. So even it's "very limited data", you have to be careful. – yo' Oct 07 '15 at 18:36
1

Plus some eCommerce sites store credit card information, bank account, purchase history. All things which can be quite compromising. They also store security details such as username/password, security question, etc. that if breached can gain access to other website accounts. – DasBeasto Oct 08 '15 at 17:45
delete does not equal deactivate. Your first example, Facebook, offers both - though it doesn't make the distinction hugely clear, nor does it make it easy to find the 'full' delete option (assuming that's what it does...). Both options are valid depending on context, but users should be very aware of the differences. – underscore_d Oct 11 '15 at 14:51

score 0 · Answer 7 · answered Oct 09 '15 at 06:12

A promise of deletion of ones user data upon request can be the one thing that makes a concerned potential user join anyway. This way the user will feel in control as they can always delete their account at a later time.

Now, some companies has measures to reduce the risk of users actually deleting their account:

Facebook has a 7 days retention period where you can undo the deletion.
Instagram stresses that you will never be able to use the same username again. As an alternative you can mute your account (make it invisible).

On ecommerce sites the nature of the user data is different than on social sites as the user data is only visible to the site owner and thus the users need to erase all tracks is felt less important.