Delete your Guardian Pin account

Guardian Pin, from Stephen Muzzeroll / The Altruist Philanthropist. Use this page to request deletion of your Guardian Pin account and the data stored with it. You do not need the app.

How to request deletion

1. Enter the email address on your Guardian Pin account. If you used Hide My Email, use the private-relay address on the account.
2. We email a confirmation link. It expires in 24 hours. Opening the link does not delete the account.
3. On the next page, choose Delete my account. You do not need the app installed.

It does not change the contacts on your phone. If you still have the app, export your data there before you do this.

Deleted when you confirm

• The account, its email address, and its display name.
• The Sign in with Apple or Google link, and this server's session tokens. When Apple revocation credentials are set, the server also asks Apple to revoke the saved Sign in with Apple refresh token.
• Devices registered to the account, including app-generated device ids and push tokens.
• Circles, and contacts stored in Guardian Pin. Contacts on your phone are not changed.
• Alerts, the locations saved with them, and audio or video clips.
• Journey plans, check-ins, the location fixes sent with those check-ins, and organization membership.
• The Medical ID saved in the app.
• Names, email addresses, phone numbers, and message text on alert deliveries.

Kept after deletion, and for how long

• An anonymized delivery record for each alert message: channel, status, a short error code, and timestamps. It has no name, email, phone number, device id, location, or health details. It is kept for 90 days after deletion, then deleted.
• The store subscription record, with the link to your account removed: platform, product id, App Store transaction id or Google Play purchase token, status, and expiry. It is kept for refunds, chargebacks, and tax for 2190 days after the later of its expiry and its last update, then deleted. It is not deleted while that subscription is active, in a grace period, or in billing retry, or while the expiry is still in the future. It has no email, name, or health details. Deleting the account does not cancel the subscription.
• The deletion request itself (account id and a hash of the email link) and, for a deletion started in the app, a receipt of the deletion counts. Those are kept for 7 days, then deleted.
• A minimal organization escalation record: the time, the reason, the step, the coordinator's place in the escalation order, and the delivery status. It has no name, email, phone, coordinates, vehicle, passengers, or route notes. It is kept for 90 days, then deleted.

While the account is still open, alerts are deleted after 90 days, journeys after 90 days, location fixes after 30 days, and clips after 30 days, unless you delete the account first.