@phf @kensanata @gcluley once it gets on another device in unencrypted or decrypted form, there is no guarantee (hope?) that it can be deleted. #Hubzilla / #Zap / #Streams make it clear (in their docs) - it is how a server-device-in-the-middle works.
Better not make it available to a 3rd party in the 1st place. Use #Briar (barebones) or Secure Scuttlebutt ( #SSB )?