If the data was not "stolen", then asking them to delete is also not "recovery".