The way you erase that data decides whether end of life is a clean goodbye or the first line of a breach report.