Deleting an online account properly, not just logging out

Export your data, cut the account loose from everything else it is attached to, and only then delete it. The order matters more than the button. Most of the damage people do when closing an account has nothing to do with privacy: they lose photos they cannot get back, or they delete the account that was quietly signing them into six other services. Deletion is also slower and less total than the word suggests, and knowing what survives it saves you from expecting the wrong thing.

Deactivation is not deletion

Most services offer at least two exits and describe them in similar language. Deactivating hides your profile and pauses the account while keeping everything on file, ready to restore the moment you sign in. Deleting starts a process that removes the account and, eventually, most of the data tied to it. Companies prefer the first, because a paused user is still a user, so the deactivate option is usually the one with the friendly button.

Read the wording on the confirmation screen rather than the button. If it says your account can be restored at any time, that is deactivation wearing a different name. If it names a countdown and warns that the action is permanent, that is deletion.

Export your data before anything else

Start here, because it is the step with a deadline you cannot reopen. Most large services have a download or export tool in settings, sometimes called your information or data and privacy. Request it first, since the file is often assembled in the background and can take hours or a day to arrive, and the link then expires after a few days.

Check what you actually get. Exports often include your posts, messages and profile, but miss things you assumed were yours: photos at full resolution rather than compressed copies, files shared with you rather than owned by you, purchase history, and anything stored by an app that merely connected to the account. Open the archive and spot check it before you go further. If the export is thin and you believe there is more, a formal request is the stronger tool, and the request you can send for a copy of your data explains what to ask for and how long they have to answer.

The account that signs you into everything else

This is the mistake that hurts. If you have ever used sign in with Google, Apple, Facebook or Microsoft, that account is not just an account: it is a key to other accounts. Delete the key and you can be locked out of services that have no password of their own, run by companies who cannot verify you are you.

Before deleting any account that could be a key, do three things. Open its list of connected apps and services, usually under security or apps with account access, and read the whole list. For anything you want to keep, sign in to that service and add an ordinary email address and password, or switch its sign in to a different provider, then confirm the new method works by signing out and back in. Only then remove the connection.

Two extra traps. Apple's sign in option can hide your real address behind a forwarding alias, so deleting the Apple account can silently break mail to every service using that alias. And an account being deleted may be the recovery email or recovery phone for other accounts, which turns a tidy cleanup into a lockout the next time you need a reset. Fix the recovery details on those other accounts first, along the lines of setting up account recovery before you need it.

Clear the money and the devices

An account with a stored card is a standing invitation, and deleting the account does not always end the billing relationship. Cancel any subscription attached to it first and keep the confirmation, then remove saved payment methods, then delete. If the subscription was billed through a phone app store or a payment wallet rather than the service itself, the cancellation has to happen there, which is one of the traps covered in finding and cancelling recurring charges for real.

Then sign out everywhere. Most services list active sessions and trusted devices under security, and revoking them stops a forgotten tablet from holding a live session while the deletion runs. If the account lived on a device you are about to pass on, the account deletion and the device wipe are separate jobs, and wiping a device properly before you sell it covers the second one.

What actually happens after you press delete

Expect a grace period, commonly a couple of weeks to a month, during which the account is suspended rather than gone. Signing in during that window usually cancels the deletion, so if you mean it, stay out. Some services email a reminder near the end, which is helpful, and others do not.

After that, the live account is removed, but three categories survive. Records the company is required to keep stay: invoices, payment records, tax and regulated files. Backups hold copies until the normal backup cycle rolls over, which is typically weeks rather than years. And aggregated or de-identified statistics derived from your activity generally stay, because they are no longer treated as being about you.

Content is the part that surprises people. Comments, reviews and messages you sent to other people often remain, sometimes reattributed to a deleted user, because they are part of someone else's conversation. Files you shared can stay with whoever you shared them with. Anything that was public may be sitting in search engine caches and archives, which the company you left has no control over. Removal from search requires a separate request to the search engine, and it takes the page out of results without taking it off the web.

The same gap between the word and the mechanism applies to AI services, where chats may be kept for a period after deletion for safety and abuse review, as what deleting your AI chat data really does explains.

When there is no delete button

Plenty of services have no self service deletion, especially older ones, business tools and small retailers. Work through the options in this order.

1. Search the help center for delete account, then check the privacy policy, which often describes a route the settings screen does not.
2. Email the support address with a clear one line request and the account identifier, asking for written confirmation when it is done.
3. If that fails, send it to the privacy contact as a formal deletion request naming the law that applies where you live, which moves it from a support queue to a compliance one.
4. If it is still refused or ignored, complain to your data protection authority in the EU or UK, or your state attorney general in the US, after using any internal appeal the company offers.

Rights differ by country, so this is general information rather than advice about a specific dispute. Where deletion is genuinely blocked, do the next best thing: strip the account down. Replace the name with something neutral, clear the address and phone number, remove the payment methods, delete stored content, and change the email to an alias you control. An empty account is a much smaller problem than a full one.

The order that works

Put together, the sequence is short. Export your data and check the file. List the services that sign in through this account and give each one its own login. Fix recovery details on any account that pointed here. Cancel subscriptions and remove stored cards. Revoke active sessions and connected apps. Then delete, and stay signed out through the grace period.

Afterwards, keep the confirmation email and the export in the same place, and note the date. That record answers the question you will have in a year about whether it was actually done, and it is the kind of tidy trail that also helps anyone who has to sort out your accounts one day, which is the wider point of what happens to your accounts after you die. Closing accounts you no longer use is one of the few privacy steps that keeps paying: an account that does not exist cannot be breached, resold or quietly billed.