Keeping data private means it must be truly deletable

Guardian Project