What if they claim publicly to delete your data, accept decentralized payments to delete the data, actually delete that data on the node in the sense that nobody can retrieve the data on the public internet using any official protocols, but routinely take filesystem-snapshots of their servers and the owner browses them offline undetectably at their leisure?
Then 3 years later all the snapshots end up on a torrent site, after you paid that whole time to "delete data".