It's worth noting that under GDPR this shouldn't be done without consideration. - Do you have user data for users in the EU? - Do you need all of that data on

It's worth noting that under GDPR this shouldn't be done without consideration. - Do you have user data for users in the EU? - Do you need all of that data on your machine to be able to provide them the service? - Are you taking reasonable steps to ensure data security. For many small developers: the reasonable step is disk encryption and a good password, and some basic scrubbing of identifiable data, but that's important to build into processes so that it doesn't get missed, and so that in the event of a breach you can prove that you're taking reasonable steps.