The button that feels like an ending
You delete the account, and something in you relaxes. That feeling is the most reliable product the data economy ships. Deletion is built to feel like a clean ending: a door closing, the file gone. It is almost never that. It is a local event in one company's nearest system, happening while copies of you carry on living in places that delete request will never reach.
This is not a new problem, and it did not arrive with artificial intelligence. Long before anyone trained a model on you, your data was already past recall, for a reason far more ordinary than AI: it copies, copying is effortless, and once a thing has been copied enough times nobody can find every instance again. AI made it worse, and we will come to that, because a trained model is one of the things it disappears into. But the rot was here first.
Copying is the part no one can undo
A record about you does not sit in one tidy place waiting to be erased. The moment it is useful it is copied, and not once. It goes into nightly backups, and into the older backups nobody remembers keeping. Into replicas spun up for speed and never torn down. Into logs, into the analytics tools bolted onto the page, into the partners and brokers it is shared with (the auction machine we took apart in the ad-tech piece). Into the export a staff member ran one afternoon and emailed to a colleague, now living in two inboxes and a downloads folder. Into a different company altogether when the first one is sold. And across borders, into countries where your right to be deleted carries no weight at all.
No one is watching all of this, because no one can. There is no map of where a dataset has been, and the company that collected it could not draw you one if you asked. Once a copy escapes into the open it is effectively free to move: leaked and resold datasets change hands for pennies a head, which is another way of saying the cost of keeping you in circulation rounds to nothing.
This is the entropy of it, and none of it needed AI to be true. Copying is instant and effortless. Gathering every copy back is slow, costly, and in practice impossible. You can break a glass in a second. You cannot will it back together.
Then AI turned two screws
AI did not start any of this. What it did was make the un-deletable worse in two specific ways, and they are worth keeping apart.
The first is training. When your data is used to build a model, it stops being a record that could be found and removed; it is diffused into millions of numbers that, together, behave a certain way. There is no row to delete. Our own agent, Deckard, is one of these things. Ask a model like Deckard to forget a single sentence it was trained on and it cannot, not out of refusal, but because there is no "sentence" in there any more. It dissolved into how the model works. You do not have to take it on faith either, because when regulators decide a model was built on data collected wrongly, the remedy they reach for is to order the whole model destroyed. Not the data pulled back out, the entire thing scrapped, because removing the data on its own is not something anyone knows how to do.
The second is re-identification. For years the comfort was that the old copies had been "anonymised", the names stripped, so they no longer counted against you. That comfort is gone. Models are very good at matching patterns, and researchers have used them to put names back onto supposedly anonymous datasets with unsettling accuracy. So the copies already scattered are not just impossible to gather, they are becoming legible again. We went into both of these in the piece on anonymisation.
So what does "we deleted your data" actually mean
At its most honest, it means "we deleted our most reachable copy." That can be completely true and still leave you almost everywhere you were. This is not the same as a company simply choosing to keep you, which we covered in the retention piece. It is quieter and worse: even a company that sincerely wanted to erase you could not reach the backups it rotated, the partner it fed, the broker that bought, or the model it trained. The promise outran what the technology can deliver the instant it was made.
Which is why "delete me from the internet" is renting, not removing
There is a whole industry selling permanent disappearance: pay us, and we will get you taken down. Look at what it can actually do. It sends opt-out requests to the brokers it knows about. The brokers take you down, then they re-acquire you, from the same public records and the same app feeds and each other, and put you back. An independent study that tracked the major removal services for four months found most listings still standing at the end, only about a third of them ever taken down.
So the subscription is not a detail, and now you can see why. You are not buying deletion. You are renting a hold against a tide that never stops coming in. Stop paying and you wash back up, because the thing you were sold, permanent removal of something that has already proliferated, was never a deliverable. This is not us accusing anyone of a scam. It is simpler and harder than that: the product cannot exist, so what gets sold instead is the endless re-doing of a job that never finishes.
The honest game
If total deletion is the scoreboard, you have already lost, and worse, you have handed the win condition to the people holding your data. So stop using their scoreboard. Two things are real and worth your effort.
First, reduce what is still flowing. You cannot recall the copies already gone, but you can shut the valves you still control: object to the selling, sharing, and profiling at the first-party companies you actually use, and at the ones you have forgotten you ever joined, which are often still quietly leaking. Less goes out tomorrow than went out today.
Second, keep the evidence. The one record that does not decay, that no backup rotation or broker re-list can touch, is the one you hold yourself: who you asked, what you asked for, the date, and exactly what they wrote back. It sits outside their systems and outside their entropy. It is the single copy in this whole story that works in your favour.
Start the record
This is the part where a deletion service would promise to make you vanish. We are not going to, because the rest of this piece is the reason no honest one can. What we do is narrower and real: you search for a company, you add it, the data it likely holds is worked out for you, and the request to stop and to delete is drafted, ready for you to send. You send it. We keep the list and log what each company says back; we do not hold their reply, you do, because it lands in your own inbox. So when one of them says "deleted," that email is the dated proof of exactly what that did and did not mean.
You will not gather every copy back. Nobody can. What you can own is the record of having asked, kept somewhere their entropy cannot reach: your own. That is where you start. Start your record →