Well in the ID scan leak wasn't there just a stream of data that was stolen? Deletion doesn't matter in that case.

I don’t think they are outright lying, but a similar third-party identity verification service was compromised recently. every ID scanned at a Hertz rental car counter was siphoned to the attacker’s system.

The company might not be storing your scans, but there’s always the chance someone else might be. I’d prefer to not risk it.