Mute, unsubscribe, and delete must be equally reachable

What it is

Symmetric reachability: exit actions — muting notifications, unsubscribing, deleting an account — should sit at menu depth, step count, and confirmation cost comparable to their corresponding opt-in actions. If enabling takes two menus and deleting takes five steps plus a support call, that is asymmetry: exit has been deliberately made the more expensive operation.

Why it happens

Asymmetric reachability converts directly into retention. Every funnel step leaks users, a law exploited constantly on the acquisition side; applying the same law to the exit path adds friction that is never called friction — each extra step, menu level, or confirmation retains another batch of "I'll do it later" users. Reachability also carries signal value: a product that is easy to leave is, psychologically, a choice that can be revised at will; one that is hard to leave turns "should I go?" into a persistent background computation that keeps the user defensive while using.

Where it stops holding

Equal reachability does not mean zero confirmation. Irreversible deletion legitimately requires identity verification and consequence confirmation at the final step — protection, not obstruction; the criterion is proportionality between the information confirmed and the irreversibility of the act (deleting all data may weigh more than muting notifications, but it must not be a maze). Statutory retention (transactions, tax records) makes "delete everything" impossible in some contexts; state the retained scope instead of pretending deletion. Paid-subscription cancellation is additionally governed by consumer-protection rules, and products should not engineer against the legal floor.

Applying it

Register, for every opt-in action, its corresponding off and undo paths, and audit the difference in steps, menu depth, and required information — that difference is exit friction. Insert no retention content into the deletion path beyond the final confirmation; retention has its own separate standard. Provide "undo of the undo": after an accidental mute, the restore path is equally reachable. Verification: measure completion rate and completion time for the three exit types (mute, unsubscribe, delete) against their opt-in counterparts; the ratio forms the product's exit-friction coefficient, checked before release.

Related

• Same group: P3.05.2 Data portability is a precondition of exit · P3.05.3 Lock-in erodes freedom of choice
• Adjacent: P3.10.2 Judging retention flows by count and wording · P3.10.3 Cooling-off and hard deletion are different exits
• Search terms: cancellation flow · symmetric reachability · exit friction