DNA and genetic testing firm 23andMe is in turmoil following a 2023 data breach and its ongoing financial decline. The once-pioneering giant now faces an uncertain future, with bankruptcy looming over the company, intensifying concerns about what might happen to the genetic data of 23andMe’s 15 million customers.
Best known for its saliva-based DNA test kits, 23andMe has seen its valuation plummet by over 99% from its $6 billion peak since going public in early 2021. The company has struggled to turn a profit, and waning consumer interest in its use-once DNA kits has contributed to its decline. Additionally, a huge 2023 data breach exposed the ancestry information of nearly 7 million users, leading to a $30 million lawsuit settlement in September 2024.
A Troubled Takeover & Customer Data Concerns
Following the breach, 23andMe founder and CEO Anne Wojcicki initially announced that she was considering third-party takeover proposals, only to later reverse course and state she planned to take the company private. However, the damage had already been done—all independent board members resigned immediately.
After filing for bankruptcy protection in March 2024, the company’s assets, including its vast genetic database, are now up for court-supervised sale. Wojcicki has also stepped down from the company .
What Happens to Your DNA Data?
23andMe collects a vast amount of genetic information, including users’ ancestry, health risks, and predispositions. However, unlike healthcare providers, the company is not bound by HIPAA (Health Insurance Portability and Accountability Act) regulations. Instead, it follows its own privacy policies, which it can change at any time.
The company has repeatedly assured customers that their data privacy will remain protected, stating that it won’t sell or share user data with insurance companies or law enforcement without a warrant. However, privacy advocates, including the Electronic Frontier Foundation (EFF), warn that a new owner could have different policies on data handling.
Additionally, Wojcicki previously told investors that 23andMe will no longer focus on drug development and will instead market its customer data to pharmaceutical companies and researchers. This further raises ethical and privacy concerns.
How to Delete Your 23andMe Data
Given the uncertainty surrounding 23andMe’s future, experts urge customers to delete their data before a potential sale.
California Attorney General Rob Bonta recently reminded state residents that they have the right to demand data deletion under California law (CNBC). Meanwhile, privacy experts like Meredith Whittaker (Signal President) and Eva Galperin (EFF’s Director of Cybersecurity) have publicly advised users to delete their accounts immediately.
To delete your 23andMe account, follow these steps:
- Log in to your account.
- Navigate to Settings > Account Information > Delete Your Account.
- Confirm the deletion request.
Note: 23andMe states that some data may still be retained for compliance reasons. Additionally, if you previously agreed to share your genetic data for research, you can withdraw consent, but the data itself cannot be deleted.
Also Read : Inside the Google-Wiz Acquisition: The Deal’s Biggest Winners
