Apparently, this is UX issue. The checkbox is not the right choice for allowing customers to make the decision. I can suggest couple solutions: Option 1. Expli

Apparently, this is UX issue. The checkbox is not the right choice for allowing customers to make the decision. I can suggest couple solutions: Option 1. Explicitly state during the signup process that for recoverability purposes all customer data is removed in N hours after request. At this point DO may loose some customers, which have wrong expectations from the service, but the interface will be simpler. Option 2. Replace checkbox with additional confirmation page, that asks customer about data removal strategy ("thrash can" or "scrub"). There should not be default selection here. Additional safety measures can be implemented to avoid occasional selection of "scrub" - confirmation by e-mail, using SMS security code or some other "two-factor" approval.