Three years later, deleting your photos on Facebook now actually works
It has been more than three years since Ars first started covering Facebook's inability to remove “deleted” photos from its servers, but this particular saga appears to be coming to an end.
Context & Ripple Effects
The story began with a BBC report in May 2009 finding that websites — Facebook prominent among them — were keeping photos users thought they had deleted. Ars kept the pressure on, and its October 2010 followup found the problem still unfixed more than a year later.
Now Ars confirms the fix has finally landed, closing a saga that ran past three years. The timing matters: the confirmation lands the same week Facebook's stock hit a record low below $20 on lockup-driven selling, so a visible privacy win arrives while the company's public standing is at its most fragile.
First-order effects
- Users who delete photos can now expect actual removal from Facebook's servers rather than persistence behind a hidden URL — the gap Ars documented continuously since its 2010 followup.
- The fix removes a concrete, easily-demonstrated talking point from privacy critics who had spent three years pointing to 'deleted' photos that were never deleted.
Second-order effects
- With the stock under pressure from lockup expirations, Facebook gains one demonstrable trust repair at zero product cost — useful currency as it argues its case to advertisers and users during the post-IPO slide.
- Rivals and smaller social platforms face a raised baseline: a deletion feature that verifiably works is now something users have been taught by this saga to expect, making retention bugs elsewhere harder to excuse.
Third-order effects
- If the pattern holds, content deletion shifts from an informal best-effort behavior to an auditable promise — with journalists and researchers like Ars treating verification of deletion as a beat worth re-checking years later, as this three-year arc shows.
- Storage architecture choices become reputational decisions: the saga illustrates how CDN caching and replication, invisible engineering details, turn into front-page privacy stories once deletion semantics fail.
The trend: Consumer web platforms are being held to verifiable deletion rather than cosmetic deletion, with sustained press scrutiny turning retention bugs into multi-year accountability stories.