really?? are we ever destroying data from our database?? i thought we would have an 'inactive' marker, so a patient can come back whenever (or at least we continue to own the data). unless this raises HIPAA issues. 

also, if a user goes away, we don't want to delete all their updates (a doctor might want to see all the updates he's made, even for patients who've moved off of our system).