01Self-service deletion — unaffiliated accounts
If your ResponderOS account is not linked to an organization (you signed up but never joined an agency), you can permanently delete your account and all associated data directly from the app without contacting support. This takes less than a minute.
Permanent action
Account deletion is immediate and cannot be undone. Your login credentials, profile, and all stored data are erased as soon as you confirm. There is no grace period and no way to recover the account after this step.
Steps to delete in-app
-
1
Open the Profile tab
Sign in to ResponderOS and tap the Profile tab. This is the last tab in the bottom navigation bar, shown with a user icon.
-
2
Tap "Delete account"
Scroll to the bottom of the Profile screen, below the Sign Out button. Tap Delete account. This link is only visible if your account has no organization affiliation.
-
3
Read the deletion notice
A screen will appear listing exactly what will be permanently erased. Review it before continuing.
-
4
Enter your password
Type your current ResponderOS password in the confirmation field. This re-authenticates your identity before the deletion is executed — a required security step.
-
5
Tap "Delete my account" and confirm
Tap the red Delete my account button and confirm in the final dialog. Your account, credentials, and profile data are deleted immediately. You are signed out automatically.
If you do not see the "Delete account" option on the Profile screen, your account is linked to an organization. Follow the steps in Section 2 instead.
02Deletion by request — organization-affiliated accounts
If your ResponderOS account is linked to a fire department, EMS agency, or other organization, data you created for official purposes (reports, evaluations, scheduling history) is owned by your organization and retained under its retention policy. Your account — login, profile, and personal data — is still yours to delete.
Option A — Request deletion in the app (recommended)
Open Profile → Delete account → Request Account Deletion. Your organization's admins are notified, and after a 7-day grace period (during which you can cancel from the same screen) your login credentials, profile, and personal data are deleted automatically. Organization-owned operational records are retained by your organization.
Option B — Email the 911 Command privacy team directly
Email Privacy@ResponderOS.App with the subject line "Account Deletion Request". Include the following:
- The email address associated with your ResponderOS account
- The name of your organization (agency or department)
- A brief statement requesting account and data deletion
We will verify your identity and process the deletion within 30 days. You will receive a confirmation email when the deletion is complete.
Note for org admins
To request deletion of an entire organization's data — all member accounts, records, and associated data — contact us at Privacy@ResponderOS.App from your registered org admin email address. Include your organization ID or name and the nature of the request.
03What gets deleted
When a ResponderOS account is deleted — whether self-service or by request — the following data is permanently erased:
| Data |
Where stored |
Status on deletion |
| Login credentials (email + hashed password) |
Firebase Authentication |
Deleted immediately |
| Profile record (name, rank, shift, station, role) |
Cloud Firestore — users/{uid} |
Deleted immediately |
| Device push token |
Cloud Firestore — user profile document |
Deleted immediately |
| Any personal data entered in individual (non-org) records |
Cloud Firestore |
Deleted immediately |
Organization-owned records (org-affiliated accounts)
Records created within an organization's scope — shift reports, incident records, fleet gripes, training signoffs, personnel notes, and other operational content — are owned by your organization, not your individual account. These records may persist under your organization's data after your personal account is removed, as they are part of the organization's operational history. Your organization's admin controls the retention and deletion of organization-owned records.
If you wish to have specific organizational records removed, contact your org admin or include the request in your email to Privacy@ResponderOS.App. We will work with your organization to address the request.
04What is retained & for how long
After an account is deleted, the following limited retention applies:
| Data |
Retention after deletion |
Reason |
| Encrypted infrastructure backups |
Up to 90 days |
Standard disaster recovery rotation — backups are overwritten, not selectively restored |
| Organization-created records referencing your account |
Until the organization deletes them |
Operational records belong to the organization, not the individual user |
| Financial transaction records (if applicable) |
As required by law (typically 7 years) |
Legal and tax compliance — Stripe holds billing records under their own policy |
| Legally required records |
As required by applicable law |
We comply with valid legal holds; we will notify you if this applies unless prohibited |
In plain terms
Your account and personal profile are gone the moment deletion is confirmed. The only thing that persists is an encrypted infrastructure backup that gets overwritten within 90 days — it is not accessible or searchable, and we do not use it to restore deleted accounts. After 90 days, no trace of your personal data remains in our systems, unless a legal hold applies or your organization retains its own records.
05Contact the privacy team
For any deletion request, question about what data we hold, or to exercise any of your privacy rights, contact us directly. We respond to every privacy email and do not charge for these requests.
For the full data privacy policy covering all 911 Command products, see the ResponderOS Privacy Policy.