The standard way to do this is to store the data encrypted, and store the key in something modifiable. Then when there's a delete you scramble the key.