Why You Should Delete Your 23andMe Data Before It’s Too Late

23andMe Files for Bankruptcy, Urges Data Protection

23andMe, the well-known DNA testing company, has filed for Chapter 11 bankruptcy and is actively searching for a buyer. Despite reassurances that customer data will remain protected, California’s attorney general has warned users to consider deleting their information.

This move follows a series of setbacks for 23andMe. A major data breach in 2023 exposed the personal information of nearly 7 million users. As a result, the company’s stock price took a nosedive, and it eventually settled a $30 million class-action lawsuit. Co-founder and CEO Anne Wojcicki recently announced her resignation and expressed plans to bid for the company herself. She also thanked 23andMe’s 15 million customers—many of whom should now be taking immediate steps to secure their data.

The Risk of Keeping Your Genetic Data with 23andMe

Users submit saliva samples to 23andMe to learn about their ancestry and potential health risks. According to Wojcicki, 85% of customers also consent to having their genetic data used in research. However, unlike traditional medical records, which are protected by HIPAA, genetic data held by companies like 23andMe has fewer legal protections. A report by Wirecutter highlights that most home DNA testing companies are not subject to the same privacy regulations that govern medical data.

With 23andMe’s future uncertain, what will happen to this sensitive information remains unclear. Board chair Mark Jensen insists that customer data privacy will be a key factor in any potential sale. However, waiting for clarity could leave your information vulnerable.

California Attorney General Rob Bonta has issued a consumer alert urging 23andMe users to request data deletion, revoke future access, and ask for the destruction of their genetic samples.

How to Delete Your 23andMe Data

If you are concerned about the security of your genetic information, follow these steps to delete your data from 23andMe:

1. Log into your account and go to Settings.
2. Scroll down to 23andMe Data and select View to download a copy of your genetic information before deleting it.
3. Click Delete Data and confirm by selecting Permanently Delete Data.
4. In Settings, choose to have your physical DNA sample destroyed.
5. Navigate to Research and Product Consents and revoke your consent to allow your genetic material to be used in research projects (this only applies to future studies).
6. Follow the additional verification steps required by 23andMe to finalize your data-deletion request.
7. If you experience issues, email customercare@23andme.com for assistance.

Even after deletion, 23andMe states that some “limited information” about customers—including the request to delete data—will be retained.

Your Privacy May Be at Risk Even If You Never Used 23andMe

The risks associated with genetic data extend beyond those who have used 23andMe personally. Because DNA is hereditary, your genetic information can still be inferred if a relative has submitted their sample.

The Electronic Frontier Foundation (EFF) has previously warned that genetic data is immutable and can reveal highly personal details about individuals and their families. If a family member has used 23andMe or a similar DNA testing service, your genetic blueprint is partially exposed. Consider reaching out to them to discuss the implications and encourage them to delete their data.

The Broader Privacy Implications

23andMe is not the first DNA testing company to face privacy concerns. Law enforcement agencies have leveraged genetic profiles from home DNA kits to solve cold cases. In 2018, investigators used GEDmatch data and family tree construction to identify the Golden State Killer, a breakthrough after 40 years.

While 23andMe claims it does not voluntarily share data with law enforcement and requires a warrant for any such requests, these policies could change if a new buyer takes control of the company.

Many users have benefited from 23andMe’s services, discovering unknown relatives and uncovering valuable family history. However, the company’s financial troubles and uncertain future make it essential for customers to take action to protect their privacy before it’s too late.