Establish what went where, whether the tool retains or trains on it, and what remains within your control: deleting conversations and accounts, revoking app permissions, and deciding whether anything meets the threshold for reporting to the ICO.
