I applaud your elaborate and thorough reply. Thank you. What it also made me think about is DeviceCheck. A recent framework implemented in iOS that allows app

I applaud your elaborate and thorough reply. Thank you. What it also made me think about is DeviceCheck. A recent framework implemented in iOS that allows app developers to use persistent device identification even after full device restore/reset. One can watch Apple's very own developers pitching it as privacy friendly way to protect app vendors from fraud while no mention of how it can be abused by the same app vendors against customers privacy: https://developer.apple.com/videos/play/wwdc2017/702/?time=1444 https://developer.apple.com/videos/play/wwdc2017/702/?time=1... Given what you wrote, it is pretty clear how this feature can be and is probably being abused by Facebook. Your recommendation is the only thing that can remedy this indeed as resetting device just wont do anymore. For people who somehow already got into privacy trouble with Facebook or Google but don't want to change/sell a device, this method might prove to be useful: https://stackoverflow.com/questions/48239712/is-devicecheck-or-indentifierforvendor-safe https://stackoverflow.com/questions/48239712/is-devicecheck-... Acquiring .ipa file of an app, then altering Bundle ID in AirSign and side loading it to your device using XCode thus resetting DeviceCheck identifiers. Overall, this is a dark chapter we are entering. Companies groom themselves to literally own customers's mind as the only safe route to maximizing profits. > Use the GDPR to your advantage to request all your data to be deleted (but don't actually trust they will delete it, because it's in their best interest not to). While learning about GDPR, i have learned that indeed companies may not honour data deletion requests. Have you made any research on how such requests should be implemented especially if one does not reside in the EU? Would using VPN be sufficient at the time of making such request? Interested in submitting such request to Google. Also what is curious in case of Facebook, they have moved their users from Ireland to US so they don't have to comply with GDPR: https://www.theguardian.com/technology/2018/apr/19/facebook-moves-15bn-users-out-of-reach-of-new-european-privacy-law https://www.theguardian.com/technology/2018/apr/19/facebook-...