For "actually private" systems like this the solution should be cryptoshredding. If this is not possible (f.e. because you believe information published once should be available forever), then the app is bad and should not exist. People have a right to be forgotten.