Always delete PII. So a user deletion runs a BE workflow on all tables where they have records and performs a search for them. This is for GDPR (EU data laws) and just sound of mind. Imagine you got hacked or made an error and you contacted ‘deleted’ accounts - it would be ruinous for a reputable company.

If a user wants to leave, let them leave - and delete their data on the way. Would you want your data stored forever?

ps. this doesn’t necessarily work when dealing with statistical or shared data (for example) you need to follow data laws and make your own judgement on what to delete.