> “Although we’ve seen no evidence of abuse, we will ask them to delete any member data they may have retained and we will conduct audits to confirm that it has been deleted,” the company said in the blog post.

I wonder how these "audits" are done? Force the individuals into a legal agreement through threat of a larger action?