DNA-Testing Companies Like 23andMe Sell Your Data. How to Delete It.

• Popular DNA-testing companies like Ancestry and 23andMe can — and frequently do — sell your data to drugmakers.
• On Wednesday the pharmaceutical giant GlaxoSmithKline announced it was acquiring a $300 million stake in 23andMe, making that connection much more explicit.
• If that news has you wondering about how your own genetic material is being used, here's a guide to deleting your DNA sample and data from 23andMe, Ancestry, and Helix.

Top editors give you the stories you want — delivered right to your inbox each weekday.

Something is loading.

Thanks for signing up!

Access your favorite topics in a personalized feed while you're on the go.

Email address

By clicking ‘Sign up’, you agree to receive marketing emails from Insider as well as other partner offers and accept our Terms of Service and Privacy Policy.

Popular spit-in-a-tube genetics-testing companies like Ancestry and 23andMe can — and frequently do — sell your data to drugmakers. But on Wednesday, one of those partnerships became much more explicit, when the pharmaceutical giant GlaxoSmithKline announced it was acquiring a $300 million stake in 23andMe.

As part of a four-year deal between the two companies, GlaxoSmithKline will comb 23andMe's genetic data to look for new drugs to develop, also referred to as drug targets. It will also use the genetic data to inform how patients are selected for clinical trials.

If that news has you thinking about how your own genetic material is being used for research, know that though the DNA you submit to these services is ostensibly anonymized, leaks can happen, and privacy advocates say that such incidents could allow your data to find its way elsewhere, perhaps without your knowledge.

"The very set-up of this venture" — which pulls data from any customer who has previously consented to research — "suggests that its initiators are not quite serious about 23andMe's customers’ informed consent," Queen’s University professor of bioethics Udo Schuklenk told Business Insider in an email.

But deleting your genetic data from these platforms can be a surprisingly tricky process. Here's how to navigate removing your spit sample and DNA data from the databases maintained by 23andMe, Ancestry, and Helix.

23andMe may keep your spit and data for up to a decade

23andMe Instagram

The core service provided by most commercial genetic tests is built on the extraction of your DNA from your spit — that's how you get the information about your health or ancestry.

After registering your spit sample online with 23andMe, you will be asked whether you'd like your saliva to be stored or discarded. But you are not asked the same question about your raw genetic data, the DNA extracted from your spit.

Based on the wording of something called the "biobanking consent document," it's a bit unclear what happens to that raw DNA once you decide to have 23andMe either store or toss your spit.

Here's what it says (emphasis added):

"By choosing to have 23andMe store either your saliva sample or DNA extracted from your saliva, you are consenting to having 23andMe and its contractors access and analyze your stored sample, using the same or more advanced technologies."

That leaves a bit of a gray area as far as what 23andMe has the ability to keep and how it can use your DNA information. If your spit or DNA sample is stored, the company can hold onto it for one to 10 years, "unless we notify you otherwise," the document says.

Still, you can submit a request that the company discard your spit or close your account. To find instructions to do so, go to its customer-care page, navigate to "accounts and registration," scroll to the bottom of the bulleted list of options under "account creation and access," and select the last one, "requesting account closure."

Ancestry won't toss your spit unless you call, but you can delete your DNA results

Sarah Kimmorley/Business Insider Australia

If you want to delete your DNA test results with Ancestry, use the navigation bar at the top of the homepage to select "DNA." On the page with your name at the top, scroll to the upper right corner, select "settings," then go to "delete test results" on the column on the right side.

The company's latest privacy statement says that doing this will result in Ancestry deleting the following within 30 days: "all genetic information, including any derivative genetic information (ethnicity estimates, genetic relative matches, etc.) from our production, development, analytics, and research systems."

However, it says that if you opted into Ancestry's "informed consent to research" when you signed up, the company cannot wipe your genetic information from any "active or completed research projects." But it will prevent your DNA from being used for new research.

To direct the company to discard your spit sample, you must call member services.

"Protecting customers’ privacy is our highest priority," an Ancestry spokesperson told Business Insider over email. "We do not and will not sell DNA data to insurers, employers or third party marketers without customers’ explicit consent. Customers must explicitly opt-in to participate in scientific research and can revoke permission at any time."

Helix will toss your spit upon request but can keep data 'indefinitely'

In its latest privacy policy, Helix, a consumer genetics-testing company based in San Francisco, says it may "store your DNA indefinitely."

The company also stores your saliva sample. You can request your spit be destroyed by contacting Helix's customer-care division. There, you'll find a request form that looks similar to 23andMe's.

Sign up for notifications from Insider! Stay up to date with what you want to know.

Subscribe to push notifications

Listen to The Refresh, Insider's real-time news show

Two crossed lines that form an 'X'. It indicates a way to close an interaction, or dismiss a notification.