[brudgers]

Suppose the button is labeled "delete in thirty days". Then the dashboard could show data scheduled for deletion.

Hmm...even better might be allowing the user to establish their own deletion policy. And establishing policies for the SAAS company regarding recovery and recovery, if it is available, is another service that the SAAS company could charge money for...though I am probably assuming a B2B model.

Anyway, my primary recommendations are:

1. Be clear what the company is actually doing.

2. If the user has control of the data policy, then let them tune the policy.

Good luck.

[afarrell]

3. Pick a default that is safe for users in the 75th percentile of carelessness.