Max Eddy, a Wirecutter staff writer specializing in privacy, dives into the impact of 23andMe's bankruptcy and why it's critical for customers to delete their data. He provides a step-by-step guide on data deletion, highlighting the risks of retaining sensitive genetic information. Max discusses the implications of genetic data privacy, including how it affects individuals and families, and urges listeners to reclaim their personal agency. With practical tips and serious warnings, he empowers users to safeguard their privacy in an uncertain digital landscape.
Customers should proactively delete their 23andMe data to mitigate risks associated with potential misuse under new ownership post-bankruptcy.
The interconnectedness of genetic information not only impacts individual privacy but also extends to family members linked through DNA submissions.
Deep dives
Consequences of 23andMe's Bankruptcy
23andMe filed for Chapter 11 bankruptcy following a significant decline, partly due to a data breach in 2023 that compromised the information of 7 million customers. This event raises concerns for users who submitted personal genetic data, as the company’s operations are now uncertain and may transfer to a new owner with different data handling perspectives. Without adequate regulations, the personal genetic information held by 23andMe could potentially be exploited or used in ways that users did not consent to, creating risks not only for individual customers but also for their extended families. The implications of this sale extend beyond the company's branding, as data becomes a commodity with uncertain future handling under a new management.
Data Privacy Risks for Users
Given the sensitive nature of genetic information, customers are urged to delete their data from 23andMe to mitigate risks associated with the company's bankruptcy. The absence of stringent regulations covering genetic data means that this information could be repurposed or mishandled by new owners, leading to breaches of privacy or unauthorized use in contexts such as law enforcement. Many customers entered into service agreements with the understanding their data would remain confidential, but this trust is now jeopardized amidst the uncertainty surrounding company acquisition. Deleting data is presented as the most proactive measure individuals can take to control how their genetic information may be used going forward.
Impact of Shared Genetic Data
The interconnectedness of genetic data means that individuals may still be linked to the information submitted by family members, even if they have not directly provided their own data. This network effect raises privacy concerns, as anyone in the family who has used the service could inadvertently expose others to risks related to data handling. The podcast discussed the example of how genetic information has been leveraged for legitimate law enforcement purposes, highlighting the importance of context in discussions around privacy and usage. While 23andMe has been cautious in cooperating with law enforcement, the potential consequences of data misuse remain a pressing concern, prompting users to reflect on what personal information they choose to share.
23andMe, maker of popular DNA test kits, has filed for bankruptcy and is looking for a buyer. Here’s why customers should delete their info before it’s sold.
Guest: Wirecutter staff writer Max Eddy
To delete your 23andMe data:
Log in to your account and select Settings.
Scroll to the bottom of the page and select 23andMe data, then View. (Download a copy of your genetic information).
Select Delete Data and then Permanently Delete Data.
In Settings, you can also opt to have your genetic material destroyed.
Navigate to the Research and Product Consents section and revoke permission to allow your genetic material to be used in research projects. (Doing so revokes that permission only for future research).
23andMe notes that you have to provide additional verification before your data-deletion request can be processed, and that you must follow instructions detailed in a 23andMe confirmation email for your request to be processed. The company recommends emailing customercare@23andme.com if you have issues submitting the data-deletion request.
