I mean, the second is usually the case; but as a business, you are expected to be 'the bigger person' and, you know, not delete people's personal data because they are being dicks to you.

Defending your actions, in some minds, makes it sound more likely that you'd do it again in the same situation.