Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Before sending a DNA sample, find out who can access your information, what the company shares, and whether you can delete both your digital results and the physical sample. Use a unique password and multifactor authentication (MFA) to protect your account, but remember that account security cannot change a provider’s retention or sharing practices. As the Federal Trade Commission (FTC) puts it, “Know that your DNA data is sensitive because it’s about who you are.”
What makes consumer DNA testing a privacy issue?
A DNA test can reveal information about you and, indirectly, your relatives. Genetic data is also unusually identifying: the National Human Genome Research Institute (NHGRI) says a DNA sample cannot be truly anonymized because, except for identical twins, each person’s DNA sequence is unique. Ancestry results may reveal unexpected relationships, while health-related results may contain sensitive information about you and family members.
Privacy risks do not end when a test result arrives. Information may exist in several forms: your account details, interpreted reports, raw genetic data, and the biological sample held by the company or a laboratory. Each may have different access, retention, and deletion rules.
What to check before you send a sample
Read the provider’s current terms of use, privacy policy, consent choices, and explanation of research participation. Look for concrete answers to these questions:
#1 Best Overall
- TOP-SELLING CONSUMER DNA TEST: From your origins in over 3,600 places around the world to the most connections to living relatives, no other DNA test kit delivers an experience as unique and interactive as AncestryDNA.
- YOUR DATA, YOUR CONTROL: We give you full control over your genetic information. You decide what to share, and with whom.
- A FEW SIMPLE STEPS: Simply activate your DNA kit online and return your saliva sample in the prepaid package to our state-of-the-art lab. Your results will be available online in roughly six weeks.
- ORIGINS AND INHERITANCE: AncestryDNA provides more precise ancestral origins with greater geographic detail. Our innovative SideView technology takes your results even further by showing your origins and matches by parental side. *Some DNA features require an Ancestry subscription.
- BUILD YOUR FAMILY TREE: Combine what you learn from your DNA results with an Ancestry subscription and gain access to millions of family trees and the world's largest collection of online family history records. *Access to record collections varies depending on subscription level.
- What information is collected from your account, sample, and test results?
- Which employees, service providers, contract laboratories, researchers, or commercial partners can access it?
- What data may be shared, for what purposes, and with which kinds of third parties?
- Is research participation optional, can you change your choice later, and does declining affect the service?
- How long are the sample, raw DNA data, reports, and account information retained?
- How do you request deletion, and what data or samples may remain afterward?
Do not assume that “research” means a nonprofit recipient or that every sharing choice is permanent or reversible. Read the provider’s explanation of recipients and purposes, and check which consent choices you can change later. The FTC advises consumers to review a testing company’s privacy practices and available controls before using its service (FTC consumer guidance, June 16, 2023).
Understand deletion: digital data and the sample are separate
Deleting an account may not automatically delete every record associated with a test. Ask whether a deletion request covers raw genetic data, interpreted reports, account information, copies held by laboratories or contractors, and the physical sample. Also ask about backup copies and records the company says it must retain.
Rank #2
- TOP-SELLING CONSUMER DNA TEST: From your origins in over 3,600+ places around the world to the most connections to living relatives, no other DNA test kit delivers an experience as unique and interactive as AncestryDNA.
- YOUR DATA, YOUR CONTROL: We give you full control over your genetic information. You decide what to share, and with whom.
- DNA + TRAITS: Ever wondered where your freckles came from, or why you hate cilantro? AncestryDNA + Traits lets you discover 75+ genetic traits, allowing you to explore how your genes might have influenced a range of appearance, sensory, performance, nutrient, and other personal characteristics.
- A FEW SIMPLE STEPS: Simply activate your DNA kit online and return your saliva sample in the prepaid package to our state-of-the-art lab. Your results will be available online in roughly six weeks.
- ORIGINS AND INHERITANCE: AncestryDNA is the only DNA test that can show your origins results, DNA matches, and traits by each side of the family, without your parents taking a DNA test.
Find out how a sample is destroyed and whether the provider’s answer covers samples already sent to a lab. If you later request deletion, ask for written confirmation stating what was removed, what was destroyed, and what remains, including any stated exceptions. The FTC’s 1Health.io order illustrates why it is worth distinguishing a company’s promises from the scope of its deletion and destruction process: the order required the company to instruct contract laboratories to destroy samples retained for more than 180 days. That was a remedy in that specific case, not a general deadline for DNA-testing services (FTC 1Health.io matter).
Secure your testing account
Account protections help guard against someone else signing in, but they do not control what the provider or its contractors do with data they already hold.
Rank #3
- ABOUT THE TEST: The Genetrace DNA Paternity Test helps families conclusively determine if a man is the true father of a child.
- NO HIDDEN FEES: Kit includes all lab fees and sample return costs to test one (1) child and one (1) potential father.
- FAST RESULTS: Get secure, confidential results within 1-2 business days after testing begins. We'll keep you updated every step of the way.
- EASY SAMPLE COLLECTION: No needles, no blood, no doctors. Collect your samples with our easy-to-use mouth swabs, then return them to the lab with the provided prepaid return envelope. It's quick, easy & painless.
- ACCURATE & RELIABLE: Up to 27 genetic markers analyzed for over 99.999% accuracy. All tests performed TWICE in our AABB, ISO 17025 & CLIA accredited laboratory.
- Choose a long, unique password. Do not reuse a password from email, banking, or another service.
- Turn on MFA if it is offered. In the provider’s account security settings, choose the strongest supported option rather than assuming defaults are the most protective. The FTC recommends MFA for DNA-testing accounts (FTC consumer guidance).
- Consider a hardware security key only if it is compatible. If your DNA-testing account supports it, a compatible hardware security key can provide phishing-resistant sign-in. NIST describes hardware FIDO authenticators as a phishing-resistant option, but support depends on the service and device (NIST Digital Identity Guidelines). A key protects sign-in; it does not change data access, sharing, retention, or deletion.
- Review privacy settings and sharing choices periodically. Check the account dashboard for controls and confirm whether changing a setting affects data already shared.
Be cautious with raw DNA downloads and other services
Raw genetic data can be downloaded or uploaded to other genealogy and interpretation services. Before transferring it, read the recipient service’s privacy terms and consider what data it will receive and retain. NHGRI warns that once you transfer data to another service, the original testing company is no longer responsible for a privacy breach at that recipient (NHGRI: Privacy in Genomics).
What U.S. law does—and does not—protect
HIPAA coverage is not automatic
The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule applies to individually identifiable health information held by HIPAA-covered entities. A direct-to-consumer testing company is not automatically covered by HIPAA just because its product concerns health or genetics. NHGRI describes direct-to-consumer genetic testing as subject to limited regulation; FTC enforcement can apply to deceptive privacy or security claims and failures to protect information (NHGRI: Privacy in Genomics).
Rank #4
- MAP YOUR ORIGINS ACROSS 5,000+ REGIONS: Ancestry Composition breaks down your ethnicity across 5,000+ geographic regions worldwide, the most detailed ancestry breakdown of any consumer DNA service. Ancestry Timeline estimates how many generations ago your most recent ancestor from each population lived.
- FIND LIVING RELATIVES: Opt in to DNA Relatives to see up to 1,500 people in the 23andMe database who share DNA with you, from close family to distant cousins, and message them directly. Your Family Tree builds itself automatically based on your DNA.
- DISCOVER WHAT MAKES YOU UNIQUE: See how your DNA may influence physical features, sensory preferences, and habits across 30+ traits, including cilantro taste aversion to hair texture to deep sleep.
- TRACE ANCIENT MIGRATIONS: Maternal and Paternal Haplogroup reports follow your ancestors' migration paths across continents over thousands of years (paternal haplogroup requires a Y chromosome). Find out how much of your ancestry can be traced back to the Neanderthals.
- PRIVATE BY DESIGN: Your DNA data is encrypted, protected, and always under your control. Enhanced security measures are implemented to keep your information safe. Subject to 23andMe’s Terms of Service and Privacy Statement at 23andMe online.
GINA has specific limits
The Genetic Information Nondiscrimination Act (GINA) restricts employers and health insurers from requesting or requiring genetic information and prohibits certain discriminatory uses. It does not provide the same protections for life, disability, or long-term-care insurance. Do not assume that a test result is protected in every insurance or employment context (NHGRI: Privacy in Genomics).
State rules and law-enforcement requests vary
State genomic privacy protections differ, and the rules that apply can depend on where you live and the testing arrangement. NHGRI also describes investigative genetic genealogy, in which law enforcement combines genetic analysis with publicly available genealogy information. That does not mean every consumer test database is available to law enforcement. Check the provider’s current policy and settings for legal requests rather than assuming either universal access or universal exclusion (NHGRI: Privacy in Genomics).
Recommended Free Tools
Best Value
- About HomePaternity: This DNA test will conclusively determine if a man is the biological father of a child using a simple at-home kit including cheek swabs from the father and child.
- Fast Results: Your kit includes Overnight FedEx return to the lab and results will be available within 1-2 days after your sample arrives, in our secure online portal.
- Over 99.999% Confidence: With up to 34 genetic markers examined, we confirm paternity with the highest accuracy, typically 99.999%+. Tests are run twice in our lab, which has obtained over 6 certifications.
- Easy Sample Collection: Collect your samples with mouth swabs, then return in the pre-paid Overnight mailer. Includes testing for 1 child and 1 possible father; can add more participants after kit registration.
- Internal Lab: With over 25 years of experience and over 20 million tests performed, we don’t use third-party labs.
What a documented data exposure shows
In a 2023 consumer alert about the Vitagene matter, the FTC said nearly 2,400 consumer health reports and raw genetic data from at least 227 people had been exposed through publicly accessible cloud storage. These are counts from that specific case, not estimates of how often DNA-testing companies experience breaches (FTC consumer alert).
The practical lesson is to evaluate both the provider’s stated privacy choices and how it secures information. A company’s privacy promises do not eliminate breach risk, and a strong password cannot make a provider’s storage practices private.
How to compare two testing providers
Use the same questions for each company, and compare the answers in its current policies and account controls rather than relying on a general claim that a service is “private.”
Quick Recap
| What to compare | What to look for |
|---|---|
| Access and sharing | Who can access data, including labs and contractors; what is shared with researchers or commercial partners; and how legal requests are handled. |
| Research consent | Whether participation is separate from the core service and whether you can change your choice later. |
| Sample retention | How long the physical sample is kept, who holds it, and how destruction is carried out. |
| Deletion coverage | Whether deletion reaches raw data, reports, account records, labs, and contractors, and what exceptions apply. |
| Account controls | Available privacy settings, a privacy dashboard, and MFA options. |
| Applicable protections | Which privacy protections may apply to your location and testing arrangement, and what the provider says about responding to legal requests. |
A practical privacy checklist
- Read the current policy, consent options, and research explanation before sending the sample.
- Check how the company treats account details, reports, raw data, and the biological sample separately.
- Use a unique password, enable the strongest available MFA, and review privacy settings.
- Think carefully before downloading raw data or transferring it to another service.
- If you request deletion, ask what was deleted, whether the sample was destroyed, and what laboratories, contractors, backups, or legal-retention exceptions may remain.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
