Even in Europe (where the GDPR is present) you can't always insist that they delete the data. If there is a legitimate interest, like a legal data retention req

Even in Europe (where the GDPR is present) you can't always insist that they delete the data. If there is a legitimate interest, like a legal data retention requirement for transaction billing records, you can't force the covered data to be deleted while that interest remains valid. Also other data can often be acceptably anonymized by removing the linkage with your personal identifiers, rather than truly wiped from existence. But yeah, a lot of companies don't even do what the GDPR actually requires, let alone what people think it does.