Deleting document scans properly (all the copies, not just one)

You sent the ID copy, the process is done, you delete the PDF. Done? Usually not — the average scan errand leaves 3–5 copies in its wake. Deleting properly is mostly about remembering where they are.

The copy sweep (2 minutes)

1. Camera roll: the original photo of the document (and its cloud-photos sync!).
2. Downloads folder: the PDF on each device you used.
3. Chat threads: the attachment sits in the conversation — delete for yourself (and “for everyone” where offered and appropriate).
4. Email sent items and drafts.
5. Recycle bins / “Recently deleted”: photos and cloud drives keep deleted items ~30 days — empty when the content is sensitive.

What you can and can’t delete

You control your copies. The recipient's copy is governed by their retention (that's why choosing official channels — with policies — matters). Backups may hold ghosts for their cycle length. Realistic goal: zero copies under your control that you can't name, and recipients you chose deliberately.

The nice part about on-device scanning

ToPDF itself holds nothing to delete: no library, no server copies, no account history. Your sweep list is exactly the list above — your own devices and channels — with no “also somewhere on a converter site's storage” unknown at the end.

Frequently asked questions

Does clearing browser data remove my scans?

Your saved PDFs live in your files, not in the browser — clearing site data only removes ToPDF’s cached engine (which re-downloads next visit). Delete saved PDFs from your Downloads/Files like any file.

Is emptying trash truly erasing?

For everyday threat models, yes. Forensic-grade erasure of flash storage is a deeper topic; encrypt sensitive storage in the first place so deletion questions get easy.