Or it could require you to manually delete the phone's regular copy of the photos, which your "friends" can verify since they're in the same room.