Over 3 years later, “deleted” Facebook photos are still online
Facebook is still working on deleting photos from its servers in a timely manner nearly three years after Ars first brought attention to the topic. The company admitted on Friday that its older systems for storing uploaded content …
Context & Ripple Effects
The problem had already persisted through a 2010 follow-up on undeleted Facebook photos, while separate coverage found that deleted Facebook accounts could still expose a name and picture. The pattern places photo deletion within a broader gap between a user-facing delete action and back-end removal.
It also fits a wider retention debate: reports of websites retaining deleted photos and Flickr's stated 90-day post-account-deletion storage period made retention windows and deletion practices a visible product-policy issue. Facebook's acknowledged legacy-system delay arrives alongside its confirmed IPO filing, raising the stakes for operational controls at a company dependent largely on advertising revenue.
First-order effects
- Facebook users cannot treat the delete control as an immediate guarantee that an uploaded photo is no longer accessible from the company’s servers.
- Facebook must update the older content-storage systems it identified, turning deletion from a front-end action into an operational requirement for its infrastructure teams.
Second-order effects
- Services such as Flickr gain an incentive to state retention periods plainly, because an explicit policy is easier for users to evaluate than an indefinite or poorly explained deletion process.
- Facebook’s advertisers and users face a trust issue around control of uploaded material, making privacy handling part of the platform’s commercial credibility as it prepares to sell public shares.
Third-order effects
- If platforms continue separating visible deletion from back-end erasure, retention schedules and deletion guarantees become core elements of consent architecture rather than obscure infrastructure details.
- The episode points toward social platforms competing not only on storage and sharing features, but on whether their data-lifecycle systems can deliver the controls promised in the interface.
The trend: Consumer internet services are being pushed to make deletion a verifiable data-lifecycle commitment rather than a cosmetic product action.