User data deletion mechanism implemented

GDPR Art. 17 (right to erasure) and CCPA §1798.105 (right to delete) both create legal obligations for apps that collect personal data from users in the EU or California. Google Play Data Safety now explicitly asks whether users can request data deletion, and apps that answer 'yes' in the Data Safety form but provide no mechanism are flagged by reviewers. An 'account deletion' that only signs the user out — without deleting server-side records — is not deletion: it is de-authentication. If a user files a GDPR deletion request and your app's only mechanism is sign-out, you are non-compliant. The backend deletion must remove or anonymize all personal data: profile, activity logs, uploaded content, and third-party data processor records.

Implement a Delete Account flow that calls your backend deletion API and clears all local storage. Add it to your Settings screen and link to it from your privacy policy.

async function deleteUserAccount(userId: string) {
  const confirmed = await showConfirmationDialog(
    'Delete Account',
    'This permanently deletes your account and all associated data. This cannot be undone.'
  )
  if (!confirmed) return

  // 1. Delete server-side data
  await api.delete(`/users/${userId}`)

  // 2. Clear local secure storage
  await SecureStore.deleteItemAsync('authToken')
  await SecureStore.deleteItemAsync('refreshToken')

  // 3. Clear non-sensitive local storage
  await AsyncStorage.clear()

  // 4. Navigate to logged-out state
  navigateToWelcome()
}

For Google Play Data Safety, also provide a web-accessible deletion URL (https://yourapp.com/delete-account) so users can request deletion even after uninstalling the app — Play now requires this URL in the Data Safety form.