Correct. You could use GDPR regulations to have them remove all your information once the account’s gone.

And then over time frame they are required to forget about you.

But they are never ever ever going to forget a phone number, they will call it a security matter and keep it for anti-fraud purposes. I believe that’s allowed.

Basically once your personal information is associated with a online account it is tainted. And if you are worried about your personal information being attached to an account you can no longer use that account because it is in fact tainted forever