> Is there some legal mechanism to compel companies to delete your data rather than this "soft-delete" garbage?

Yeah, GDPR and California's equivalent thing. Hacker News seems to really dislike it for some reason though.

I guess if you're building a business you don't see it from that perspective, just another hurdle stopping you from moving fast and leaking things