One place I’m familiar with actually just deidentifies data when they say they delete it. They also have ways to re-identify if needed.