One of my takeaways from reading that long ago was that there should be a commandment: treat the user's data as sacred, and do not delete it without permission. (Just ordered a copy of it so I can read it again.)