Delete Account

Permanently delete the current user's account and all associated data.

Rate-limited to 3/hour per IP. Account deletion is the most destructive action a user can take through the API — this cap blocks accidental rapid-fire deletes (a leaked JWT could otherwise nuke an account in a single request) while leaving room for "delete + recreate" support flows. A leaked JWT is still a problem; a re-auth challenge is the proper long-term fix (Step 9b in the audit plan).

Before deletion:

1. (iOS) Best-effort revoke of Apple Sign-In OAuth grant — Apple Guideline 5.1.1(v). Does NOT block deletion if Apple is down.
2. (Android) Cancel active Google Play subscription. BLOCKS deletion on persistent failure — we MUST NOT delete a user account while Google Play would keep charging them. iOS subscriptions cannot be server-side-cancelled (Apple's design); user must cancel via iPhone Settings → Subscriptions. The Apple revoke above also does not stop billing — only the user can stop iOS auto-renewal.
3. Send a push notification confirming account deletion.
4. Cascade-delete all user data.