> Having PII littered about in ways that aren’t easily deletable is quite a canary. "We can't figure out how to delete PII" and "Our schema is flexible" are th

> Having PII littered about in ways that aren’t easily deletable is quite a canary. "We can't figure out how to delete PII" and "Our schema is flexible" are the same canary in my view. Everything goes back to founders & business owner giving enough of a shit to force a good architecture from the beginning. You can't build an effective schema to store complex information if your mission isn't clear yet. If concerns over PII storage are "we'll worry about that later", then whatever schema is invented from that point will mirror that vision. If the vision is "PII == high-level radioactive waste", then the resulting schema may not even offer places to store it, outside of specially-controlled tables.