Here's what actually happens when you delete a file: the operating system removes the pointer — the map entry that says where the file lives — and marks that space as available for reuse. The data itself, the territory, stays exactly where it was until something happens to overwrite it.
Off-the-shelf recovery tools read that 'deleted' data in minutes. A quick format often just writes a new, empty map over the same untouched territory. Even a full format may leave recoverable remnants depending on the drive and method.
Genuine sanitization works at the territory level: verified overwriting where the media supports it, firmware purge commands, cryptographic erase, or physical destruction — the NIST 800-88 hierarchy. The difference between 'we deleted everything' and 'we destroyed everything' is the difference between a UI gesture and an evidence-backed process.
If the answer involves the recycle bin or a quick format, start with how certified destruction actually works.