How about shipping them from gathering the data to begin with?

Because I guarafuckingtee you that those deletion promises are exactly that: promises. They'll tag your data as "deleted" and simply continue using it anyway