Also, it has to be technically feasible to remove the user data. So I don't think data stored on the client's own device is data that you necessarily should rem

Also, it has to be technically feasible to remove the user data. So I don't think data stored on the client's own device is data that you necessarily should remove (though IANAL).