So if someone could physically gain access to your server/computer and press "delete" –– would that mean your service is not self-hosted?

Where is your own hardware located? A data center? Or maybe your place of residence? What if that location is compromised? Does that mean that physical ownership of the hardware is also not self hosted?