Deleting your account

Everything on your profile that is about you is overwritten, immediately and permanently:

• Your display name. It is replaced with Deleted user everywhere it appeared.
• Your email address, and the record of whether it was verified.
• Your phone number, and the setting that let anyone find you by it. The number is released, so you can use it again if you sign up afresh.
• Your Venmo and PayPal usernames, and the setting that showed them.
• Your profile photo. The stored image file is deleted from storage, not merely unlinked, so it stops being shown anywhere and stops existing.

Your sign-in is dismantled at the same time:

• Every linked Google or Apple identity is unlinked and deleted, so signing up again with the same provider account starts a genuinely new account rather than reviving the deleted one.
• Where you used Sign in with Apple, Ledger calls Apple to revoke the access it was given, so Ledger disappears from the list of apps using your Apple ID.
• Every session ends at once, on every device you were signed in on, not only the one you deleted from.

Your expenses and group memberships are not deleted, and that is deliberate rather than an oversight. Half of every split you are part of is somebody else’s balance. Removing your rows would silently change what your housemates owe each other, and there is no second copy of a household’s accounts to reconcile the difference against. One person leaving must not become everyone else’s accounting error.

So the following stay, attributed to Deleted user:

• Your group memberships and the splits attached to them, so the balances of everyone you split with remain correct.
• Expenses, settlements, comments and activity entries you created, for the same reason. A comment you wrote stays on the expense it was written on.
• Receipt images and files already attached to an expense, and any group avatar or banner you uploaded, because they belong to the group’s records rather than to your profile. Your current profile photo is not among them — it is deleted. A profile photo you had previously replaced with another is not separately swept.
• Expired session records, until the routine purge thirty days after expiry removes them. They can no longer be exchanged for anything.
• Server log lines already written. Device records for notifications remain as rows but are switched off as part of the deletion, so nothing further can be sent to them.

None of it carries your name, your email address, your phone number or your photo any more. What remains is the arithmetic.

If you want something removed that this page says is kept, ask, and it can be looked at case by case. The support page is the place to do it.

Read the privacy page for what Ledger stores in the first place.