When we press the "delete" button on our devices or online accounts, we think our data is gone forever. But digital security experts confirm that the reality is quite different.
In fact, moving files to the Recycle Bin and then emptying it doesn't actually erase the data. The system doesn't delete the file when it's deleted; it simply marks the storage space as "unused" so it can overwrite it later, and it updates the location records so the device no longer knows the file's location.
The data itself remains intact and can be recovered using special file recovery software.
Studies indicate that tech companies often provide vague explanations about the deletion process, creating confusion among users about the fate of their data. This ambiguity isn't limited to operating systems; it extends to social media platforms and subscription services, exposing millions to security and privacy vulnerabilities.
One of the most common misconceptions is that deleting an app from a phone automatically deletes the associated account. However, millions of accounts remain after their apps are removed; these are known as dormant or "zombie" accounts. They contain personal data that is vulnerable to hacking and theft, and include services such as shopping, storage, dating, finance, and live streaming.
In addition, some users suffer from severe anxiety about losing their personal data, such as photos and music, a condition known as diagraphephobia (fear of accidental deletion). Although not a formally recognized mental disorder, studies confirm that it leads some people to retain large amounts of data without deleting it, increasing the risk of its misuse.
While these problems are complex in the world of traditional storage, they become even more so with the advent of artificial intelligence. Intelligent models remember the data they have been trained on, and the process of "erasing" this memory—or what is known as "reverse learning"—is technically challenging. Here, technical realities clash with legal rights. While the law grants individuals the "right to request the erasure of their data," companies are often unable to fulfill these requests due to technical limitations, placing everyone in a gray area between law and technology.
To address these challenges, researchers at the University of Bristol are developing an innovative approach known as "explainable deletion," a system that breaks down the deletion process into six clear questions: What is being deleted? How is it being deleted? When? Who has the authority to delete? Where is the data located? And why is the process being carried out in this way?
This system aims to empower users to control their data, choose the appropriate deletion method, and ensure its execution, while also providing options for data recovery in case of accidental deletion. Although this protocol has not yet been adopted, its implementation could enhance user trust and help companies demonstrate compliance with regulations such as the General Data Protection Regulation (GDPR) and the right to be forgotten.
Ultimately, the most important question remains: can we truly erase our digital footprint? While the answer isn't simple, understanding the true mechanisms of deletion is undoubtedly the first step toward regaining control of our privacy in an age where our data flows ceaselessly.
