Introduction: The Urgency of Protecting Your Genetic Privacy
In a shocking turn of events, the once-celebrated genetic testing company filed for Chapter 11 bankruptcy protection on March 23, 2025, sending ripples of concern through its 15 million-strong customer base. Known for its innovative at-home DNA testing kits, if not a pioneer that allowed millions to explore their ancestry and health predispositions? However, the company’s recent financial turmoil, coupled with a history of data breaches, has thrust the spotlight onto the security of . As headlines dominate the news, customers are left wondering: what happens to their sensitive DNA information now?
For years, thrived as a Silicon Valley darling, peaking at a $6 billion valuation in 2021. Yet, the company’s fortunes have since plummeted, exacerbated by a 2023 data breach that exposed the personal information of nearly 7 million users. Now, with looming and the potential sale of its assets—including customer data—privacy advocates and legal experts are sounding the alarm. Consequently, many users are seeking answers on to protect themselves from an uncertain future.
This comprehensive news-style blog post delves into the unfolding saga, explores the implications of the , and provides a meticulous, step-by-step guide on . Whether you’re a long-time user or a concerned relative of someone who submitted their sample, this article equips you with the knowledge to act swiftly and decisively.
The Fall of 23andMe: From Biotech Giant to Bankruptcy
To understand why deleting your is more critical than ever, let’s first rewind the clock. Founded in 2006 by Anne Wojcicki and her co-founders, revolutionized consumer genetics by offering affordable saliva-based kits. Customers mailed in their samples, and in return, they received detailed reports about their ancestry, genetic traits, and potential health risks. The company’s allure was undeniable—celebrities like Oprah Winfrey endorsed it, and millions flocked to uncover their roots.
However, beneath the surface, and business model faced mounting challenges. Unlike subscription-based services, struggled with a “one-and-done” problem: once customers received their results, there was little incentive to return. Efforts to pivot into drug development and subscription models faltered, and by 2023, a massive data breach dealt a devastating blow. Hackers accessed sensitive information over five months, leading to a $30 million class-action lawsuit settlement and a plummeting price, which dropped from over $300 per share to mere cents by March 2025.
Fast forward to March 23, 2025, when news broke. The company filed for Chapter 11 protection in the U.S. Bankruptcy Court for the Eastern District of Missouri, aiming to restructure and sell its assets under court supervision. Concurrently, CEO Anne Wojcicki resigned, expressing intent to bid for the company independently. As headlines spread, California Attorney General Rob Bonta issued an urgent consumer alert, urging users to and destroy their samples. The message was clear: with potentially up for grabs, proactive steps are essential.
Why Delete Your 23andMe Data Now?
The surrounding the 2023 breach exposed vulnerabilities in how is stored and protected. While the company insists there are “no changes” to its data management during bankruptcy, experts warn that this could shift if a buyer emerges. Under U.S. federal law, genetic data held by private companies like lacks the robust protections of HIPAA, which governs medical records. Instead, privacy hinges on the company’s policies—policies that could change under new ownership.
Moreover, raise the stakes. In a bankruptcy sale, customer data is considered an asset, potentially transferable to a third party. Legal scholars, such as University of Iowa law professor Anya Prince, note that while some states like California offer genetic privacy laws, federal safeguards are minimal. If your sample falls into the hands of an insurer, employer, or even law enforcement (via subpoena), the consequences could be profound. Genetic data is immutable—unlike a password, you can’t change it—and it reveals not just your secrets but those of your relatives too.
Thus, the urgency to stems from this precarious moment. With proceedings underway, now is the time to act before your information is sold or misused. But how exactly do you go about it? Let’s break it down.
Step-by-Step Guide: How to Delete 23andMe Data
Deleting your is a straightforward process, but it requires attention to detail to ensure all traces are removed. Below, we outline the steps, enriched with tips and precautions based on the latest updates as of March 25, 2025.
Step 1: Log Into Your 23andMe Account
First and foremost, access your account. Visit 23andme.com and sign in using your registered email and password. If you’ve forgotten your credentials, use the “Forgot Password” option to reset access. Given the high volume of users attempting to post-bankruptcy, the site may experience slowdowns—patience is key.
Step 2: Navigate to Account Settings
Once logged in, locate your profile icon in the top-right corner and select “Settings” from the dropdown menu. This section houses all account management options, including data deletion. Scroll down until you see “23andMe Data” at the bottom of the page, then click “View.” This takes you to the hub for managing your .
Step 3: Download Your Data (Optional)
Before proceeding to delete, consider downloading your genetic information for personal records. Under the “23andMe Data” section, you’ll find an option to export your raw DNA data and reports. Click “Download” and save the files securely—preferably on an encrypted drive—since this is sensitive information. While optional, this step ensures you retain access to your ancestry or health insights after deletion.
Step 4: Initiate Data Deletion
Next, scroll to the “Delete Data” section within the “23andMe Data” page. Here, you’ll see a red button labeled “Permanently Delete Data.” Click it to begin the process. A pop-up will appear, explaining that deletion is irreversible and will erase all profiles linked to your account. Additionally, it notes that may retain limited data (e.g., email, deletion request records) for legal compliance—a point we’ll address later.
Read More
Bulls vs. Nuggets: A Thrilling Showdown in Chicago’s West Coast Finale
Step 5: Confirm Your Identity
To prevent unauthorized deletions, requires identity verification. You’ll be prompted to enter your date of birth and, in some cases, additional details tied to your account. Once submitted, the system processes your request and sends a confirmation email to your registered address. Check your inbox (and spam folder) promptly, as the link expires within 24 hours.
Step 6: Verify Deletion via Email
Open the email from titled “Confirm Your Data Deletion Request.” Inside, you’ll find a button labeled “Permanently Delete All Records.” Click it to finalize the process. If you miss the 24-hour window, you’ll need to restart from Step 4. Upon confirmation, deletion begins, though it may take up to 45 days under California law.
Step 7: Revoke Research Consent (If Applicable)
If you previously opted into research programs—85% of users did, per Wojcicki’s statements—revoke that permission separately. Return to “Settings,” navigate to “Research and Product Consents,” and uncheck all boxes allowing use in studies. This step ensures your information isn’t included in future research, though past uses can’t be undone.
Step 8: Request Sample Destruction
Finally, if you opted to store your saliva sample, request its destruction. Under “Preferences” in Settings, toggle off sample storage and submit the change. policies state samples are discarded within a “legally applicable timeframe,” typically 30-45 days. Confirm with customer support at customercare@23andme.com if needed.
What Happens After Deletion?
After completing these steps, your data is slated for removal, but there are caveats. retains certain information—such as your email, sex, and birth date—for legal reasons, even post-deletion. Additionally, if your data was used in prior research (e.g., with GSK), those anonymized records persist. This limitation underscores the permanence of sharing genetic information with companies like .
Furthermore, during , deleted data should remain out of any asset sale, as it’s no longer active in the system. However, privacy experts caution that timing matters—delete before a sale finalizes to minimize risks. As of March 25, 2025, hovers at 79 cents, and the 45-day bidding period is underway, heightening the need for swift action.
The Bigger Picture: Lessons from the 23andMe Scandal
The and subsequent serve as a cautionary tale about consumer genetics. While promised empowerment through knowledge, it also exposed users to unforeseen risks. Law enforcement has used genetic databases to solve crimes, insurers could deny coverage based on predispositions, and hackers have already exploited vulnerabilities. With , these threats loom larger.
Consequently, this saga highlights the need for stronger federal privacy laws. Unlike Europe’s GDPR, U.S. regulations offer scant protection for . Advocates like the Electronic Frontier Foundation urge consumers to lobby for change while taking immediate steps to .
Conclusion: Take Control of Your Genetic Future
As proceedings unfold, the fate of millions’ DNA hangs in the balance. Whether you’re a customer or linked through a relative’s test, the power to rests in your hands. By following our detailed guide, you can mitigate risks and reclaim control over your most personal information.
In summary, the isn’t just a corporate collapse—it’s a wake-up call. Act now, stay informed, and consider the long-term implications of sharing your . The clock is ticking, and your privacy depends on it.
- Electronic Frontier Foundation – Genetic Privacy – Explore broader genetic privacy concerns.
- Consumer Reports – Data Deletion Guide – Learn more about managing personal data.
- NPR – 23andMe Bankruptcy Coverage – Read expert analysis on the fallout.
- The New York Times – 23andMe Data Risks – In-depth reporting on the crisis.
FAQ: Your Questions Answered
1. Why should I delete my 23andMe data now?
With , your could be sold to a third party with different privacy policies, increasing misuse risks.
2. Can I delete my data if I don’t have an account but a relative does?
No, only account holders can . Ask your relative to delete their account, as it indirectly protects your shared DNA.
3. How long does it take to delete 23andMe data?
Deletion begins after email confirmation and may take up to 45 days, per California law.
4. What happens to my data if 23andMe is sold?
If still in their system, your could transfer to the buyer, subject to their privacy terms.
5. Is my data safe after deletion?
Mostly, yes, but retains some info for legal compliance, and past research data can’t be recalled.
