[antonej]

I've encountered the same thing in another subscription business where there was system data showing the customer hadn't used it in a long time. My personal (not legal) opinion is that, assuming these account for an immaterial percentage of revenue, the safe approach is to go ahead and cancel them. The reason is that to do otherwise would make the company look really ugly if ever questioned by a state AG or the FTC or in a class action suit. It's tough to say "Yes, we had computer records clearly showing the customer hadn't logged in for 16 months but kept charging her each month anyway because she never said stop." Folks whose jobs entail protecting consumers (even against themselves) don't like hearing that.