Deleted, but still there
A user tapped 'Delete my account' and saw a goodbye screen. A month later they ask why you emailed them a newsletter, and why their photos still open from a saved link.
This answers: Does deleting a user delete their data? No coding needed. 3 quick decisions.
- Keeping data safe
- Where your data lives
Checking your access…
Does deleting a user delete their data?
Not by itself. Deleting the auth user removes the login, and only rows whose foreign keys cascade go with it. Uploaded files, other tables and copies in email, analytics or support tools remain. Privacy laws like GDPR give people the right to erasure, so delete everywhere their data lives and say what you keep and why.
Breaks at File storage: Files and other copies never deleted
Why AI tools write this bug
AI tools implement 'delete account' as one call to the auth provider, because that is what the button's name suggests, without mapping where else data lives.
How to fix it
- List every table, storage path and outside tool holding user data.
3 more steps, and a prompt that checks your own app for this bug. Part of Pro.
UnlockCommon questions
- Do I have to delete invoices?
- Some records, such as invoices, may have to be kept for tax or legal reasons. Keep only what is required and explain it in your privacy policy.