I'm confident that they must have deleted the logs, as they said.
That's too much confidence you are having in CM.
What happened to "Don't trust, verify?"
How do you verify CM's promises? Did they let you in and show their database? I know that don't make sense because it is impossible to verify CM's actions. It is just a promise. Could be true, could be wrong.