Im a developer too, and it well may be that the database stores performed transactions, call it an audit trail if you will. So deleting passwords also creates data.
This is why I'm a bit wondering why you are so concerned about 'size'. It's for me a rather meaningless metric if it works as expected and poses no hindrance.