Deleting your account

Account deletion is self-service, completes inside the product, and is permanent.

In the iOS app

Account, Settings, Delete account. Type DELETE to confirm, and prove it is you on the same screen: your password for a password account, a fresh Sign in with Apple for an Apple account, or an authenticator code when two-factor is on. The deletion completes in the app (DELETE /api/account); the app signs out and unregisters the device.

On the web

1. Settings, Profile, Delete account…, which opens nhmohio.com/account/delete; confirm there (POST /api/auth/delete-account/request). A confirmation email is sent with a single-use link that expires after 60 minutes.
2. Follow the link to confirm (POST /api/auth/delete-account/confirm).

What is erased

Your user record, every domain and its scan history, change events, lookalike results, DMARC reports and the report address, monitored addresses and their cached breach results, API keys, conversations, compliance records, device tokens, and your credit balance. If you signed in with Apple in the app, DomainGuard also revokes its Apple sign-in token, so DomainGuard stops appearing under Sign in with Apple in your Apple ID.

Kept: the credit ledger (the record of credits granted and spent) and earlier security audit log entries, which age out after 400 days. The deletion itself is recorded in the audit log under a placeholder (deleted-account-<id>), not your email address.

What is not

• An Apple subscription. DomainGuard cannot cancel it. Cancel under Manage subscription (Apple's settings) before deleting, or it renews against an account that no longer exists and the charge has to be refunded through Apple.
• Aggregate and anonymised records that identify no person: the status catalogue, the vulnerability feeds, and operational error records, which are pruned on their own schedule (see Privacy and retention).

Before you delete

• Export anything you want to keep: the PDF report, the accessibility audit JSON, the lookalike evidence pack. Nothing can be recovered afterwards.
• Cancel the Apple subscription.
• Rotate or revoke API keys that scripts still use, so they fail loudly rather than mysteriously.

Sign out is not delete

Sign out keeps the account and everything in it; Delete account does not. Both are rows in the app's Account list, and Delete is deliberately not red so it is read rather than reflexed.

Common questions

I deleted by mistake. There is no undo. Create a new account; domains can be re-added and re-scanned, but history is gone.

Will you email me after? No. The only email is the confirmation link sent before a web deletion; nothing is sent once the account is gone. The address is removed from every list.