[borplk]

It is fairly standard practice to mark for deletion and communicate on the UI to the user that their data will be deleted in X days. Also doesn't hurt to spell that out in terms of service and privacy policy.