According to that blog entry, it just makes that data hidden on the front-end and from the API, but it still resides on your servers. Has that policy changed?

According to that blog entry, it just makes that data hidden on the front-end and from the API, but it still resides on your servers. Has that policy changed? Soft-deletes, which the blog indicates that you are doing, is very different from actual deletion. To make the distinction clear, if a log of a call or message is deleted, can it be given to law enforcement? If so, it's not truly deleted.