23&Me

23&Me is an at-home, direct-to-consumer (DTC) genetic testing company which utilizes saliva and survey sampling to generate ancestral and health reports.

Privacy Policy

You can learn more about 23&Me's privacy policy straight from the source at https://www.23andme.com/privacy/. The full version of the text is available at https://www.23andme.com/legal/privacy/full-version/.

Data Collection

23andMe collects personal information that is both identified, such as their genotypes, diseases, and other traits or characteristics, and de-identified information that has been stripped of identifying data, such as name and contact information. Personal information includes genetic information, sample (e.g. saliva sample) information, self-reported information, biometric information, user content, and web-behavior information.

Information is collected directly by users; by service providers such as cookies, analytics tools, software development kits, and more; other third parties like other users, individuals, corporate affiliates, and other third parties; and 23andMe-generated information such as using your Genetic Information to predict certain health predispositions and may infer your location based on your IP address.

Data Sharing

23andMe shares information with service providers who support business operations such as sample storage, marketing, and more. You can share your Personal Information with friends, family, your doctors and other healthcare professionals, and other individuals or entities including third party social media apps.

23andMe explicitly states that it does not share your Personal Information with public databases, insurance companies or employers, or law enforcement absent court orders.

Privacy Rights

You have the choice to opt-in or opt-out to: storing your sample, viewing your health reports, sharing your information with genetic relatives or other users, receiving Personalized Recommendations, be contacted for promotional purposes, andparticipating in 23andMe Research. You can also accessa nd download your Personal Information, correct information, and delete your account through the site’s request process or by contacting customercare@23andme.com.

Data Security

23andMe uses a “range of physical, technical, and administrative meausres” to protect your Personal Information. All connections to and from 23andMe are encrypted using Secure Socket Layer (SSL) technology.

23anMe in the News

In December 2023, hackers targeted Jewish and Chinese customers using old passwords from 23andMe gained access to personal information from 6.9 million profiles. The breach opened the door to millions of profiles who wanted to use 23andMe to connect with those who had close DNA matches. Following the breach, 23andMe required all customers to change their existing password and set up two-step verification according to a company statement.