The genetic testing firm 23andMe, with a customer base exceeding 15 million, has recently filed for Chapter 11 bankruptcy and is currently seeking a buyer. For individuals who have utilized the company’s DNA testing services, this situation raises significant privacy concerns—prompting many to consider removing their data.

Understanding the Privacy Risks

Whenever personal information is shared with a company, some degree of control is relinquished. As noted by 404 Media, for 23andMe users, this encompasses the management of genetic data, its monetization, security measures, and the potential for the information to be shared, sold, or even disclosed through data breaches.

In a statement, 23andMe asserted that their bankruptcy proceedings will not affect their data management policies. However, the future of the genetic data in the hands of a new proprietor remains uncertain.

This uncertainty poses various hazards, according to insights provided by privacy activists in an interview with The Washington Post. Notably, 23andMe experienced a data breach in 2023 that compromised the records of approximately 7 million users, leaving customers wary about the company’s ability to safeguard their information amid bankruptcy challenges.

Moreover, the privacy policy of 23andMe permits the possibility of your data being sold or transferred as assets during a sale. If privacy practices differ under new ownership, it becomes the user’s responsibility to monitor such changes—something most rarely do when reading privacy agreements.

Comparable organizations have previously transmitted genetic data to law enforcement, government bodies, and insurance firms, generating significant privacy issues. This can lead to scenarios where police use genetic information to identify suspects or insurance companies make coverage decisions based on genetic predispositions. Additionally, genetic information is often linked to family members, meaning that privacy breaches can extend to relatives as well.

Steps to Delete Your 23andMe Data

The California Attorney General has issued a consumer alert outlining several actions you can take to safeguard your data amid these concerns. To proceed with the deletion of your genetic information, follow these steps:

1. Access your account on the 23andMe website.

2. Navigate to Settings > 23andMe Data.

3. Click on View next to 23andMe Data.

4. Download your data if you wish to keep a personal copy.

5. Find the Delete Data option and select Permanently Delete Data.

6. Confirm your deletion request via the link in the email sent by 23andMe.

Additionally, you have the option to request the destruction of your genetic sample by selecting Settings > Preferences, and you can revoke your consent for research utilization of your data in Settings > Research and Product Consents.