Short answer
Owning your data means being able to remove it. Look for a provider that lets you delete your data and destroy your sample on request, and that is transparent about any limited records it is legally required to keep. If a company makes deletion hard to find or hard to do, treat that as a warning sign.
Verify before publishing: Privacy and data-protection statements must reflect the current DPDP Act position and any provider-specific policy. Verify all legal references against live sources before publishing; do not state a protection that cannot be substantiated.