I know you want to do (1) and (2), but my point is that you're not getting that from the other web 2.0 apps either. When you delete data perhaps only a is_dele

I know you want to do (1) and (2), but my point is that you're not getting that from the other web 2.0 apps either. When you delete data perhaps only a is_deleted flag gets toggled in a database, and copies of your work may reside in backups for months or even years. When you want to share your data you want to be reasonably certain the app is secure, but there is no way for you to determine if this is the case. I'm saying that a very simple system with very obvious security implications may be preferable to a complex system. It's easy to get Open Auth wrong, it's easy to get logins wrong, and so on. Many apps will give you that login form and the share and delete buttons but chances are you would shudder at the thought of using the app if you knew what the backend looks like. About those remarks on the page. The first one, "We'll try our best to preserve your data", is the best you can hope for in any situation, and the second remark that the website isn't very secure at all is also truthful given that it doesn't even use SSL. So to reiterate, login forms on an app may make you feel more secure, but it won't bring you any closer to what you want.