[shashashasha___]

> She added her new e-mail address to Facebook.

> for some reason they kept her old address.

for some reason? she added an additional email but didn't remove the old one. there are a ton of online services (for example github) that allow you to define multiple email addresses. if you want to remove... remove. I never saw an online service which doesn't show you all the registered emails you have.

[bmarquez]

This is not always true with regards to personal information.

I wanted to delete my phone number from Snapchat, but it wouldn't let me without adding a new phone number. Note that the account was created using email address so the existence of a phone number wasn't necessary. It just seems like some services love to collect personal information but not remove it, especially those that rely on targeted advertising.

Also, if you change an email address, in some services, the old email isn't actually removed from your records. I did a CCPA "download a copy of all your data" request on Epic Games and it basically stored every email address I ever used, even though it wasn't visible in the UI, and even if some are inactive. Instagram and Twitter are the same.

[shashashasha___]

that snapchat thing you wrote about sucks. however, what you wrote on epic does make sense. maybe they didn't remove for security reasons but you can't use it to login and therefore can't steal some account. think what happens if they had purchases info with that email... they might need it. but at least block login attempts.

[sverrehu]

My wife is not a techie, and I do not watch over her shoulder to make sure she does everything she should. And I must admit, this was an attack vector I did not foresee myself.

[shashashasha___]

we all make mistakes. my oldest uses 10 min mail and never puts her name anywhere. the others however.... they click everything :(

[sverrehu]

You taught your oldest one good. Kudos!