The Wirecutter Show – Episode Summary: "Delete Your Data from 23andMe"

Release Date: March 28, 2025

In this compelling bonus episode of The Wirecutter Show, hosts Christine Cyrclassette, Kyra Blackwell, and Rosie Guerin delve into the recent bankruptcy filing of the prominent DNA genetic testing company, 23andMe. The episode provides an in-depth analysis of the potential ramifications for users who have entrusted the company with their genetic data, underscoring critical privacy and security concerns.

1. Episode Introduction

The episode opens with Rosie Guerin announcing a special bonus edition dedicated to the unprecedented news of 23andMe filing for bankruptcy. The hosts immediately address the gravity of the situation, highlighting the profound impact this development may have on individuals who have previously utilized the company's genetic testing services.

Christine Cyrclassette (00:03): "Oh, so bad. It has a lot of knockdown effects for people who've taken these tests."

Rosie Guerin (00:38): "It's scary and it's a lot of information. Arguably the most vital, private, important information any person has."

2. 23andMe's Bankruptcy: Background and Context

Rosie Guerin elaborates on the bankruptcy filing, explaining that 23andMe has been grappling with declining fortunes for some time, exacerbated by a significant data breach in 2023 that compromised the genetic information of approximately seven million customers. This breach, coupled with ongoing rumors of a potential sale since the previous year, culminated in the Chapter 11 filing as the company seeks a buyer.

Max Eddy, a Wirecutter writer specializing in privacy and security, provides critical insight into the situation:

Max Eddy (04:44): "This week 23andMe filed for Chapter 11 bankruptcy and they are currently looking for a buyer to take over the company. This was not a surprise...there was a data breach in 2023 which exposed the information of 7 million customers and it has just been down since then."

3. Risks to Customers: Privacy and Data Security Concerns

The core of the discussion centers on the privacy implications for users who have submitted their genetic information to 23andMe. Unlike traditional medical information, the genetic data handled by 23andMe is not protected under HIPAA (Health Insurance Portability and Accountability Act), leaving it vulnerable to misuse.

Christine Cyrclassette (02:11): "Misused left and right."

Max Eddy (05:25): "This information is not covered by HIPAA...the data that 23andMe holds is deeply, deeply personal...there's perhaps nothing more personal than your genetic information."

The hosts emphasize that the sensitivity of genetic data extends beyond the individual to potentially include extended family members, creating a network effect of privacy vulnerabilities.

4. Deleting Your Data: A Step-by-Step Guide

Given the bankruptcy and the uncertain future of data handling by potential new owners, the episode provides a comprehensive guide for users to delete their genetic data from 23andMe. The steps outlined by Max Eddy are as follows:

1. Log into the 23andMe website and navigate to the Settings section.

2. Scroll to the bottom of the page to find the "23andMe Data" option and click "View".

3. Download Your Data: Users are advised to download their genetic information before deletion. However, this process can be time-consuming and may require multiple attempts due to website lag.

   Rosie Guerin (09:16): "It took almost the entire evening... their website was really, really laggy."

4. After downloading, select "Delete Data" and then "Permanently Delete".

5. Complete any additional authentication steps sent via email to finalize the deletion process.

6. Revoke Consent for Future Research: Under Product Consents in the Settings, users can revoke permission for their data to be used in future research.

7. Opt for Sample Destruction: Users have the option to have their physical genetic samples destroyed through the Settings menu.

Max Eddy (09:16): "You're going to log into the site... you will have to follow the instructions that come in an email after the fact."

5. Potential Consequences if Data is Not Deleted

The episode explores the worst-case scenarios should users opt not to delete their data. Max Eddy speculates on possibilities such as unauthorized access by companies with dubious intentions, including the misuse of genetic data for creating bioweapons or unwarranted surveillance.

Max Eddy (07:56): "They could be used for tracking individuals, tying it to law enforcement databases... it's hard to say because we don't know... what happens next is unclear."

Additionally, he highlights the concern that once data is sold, the original consent and safeguards might not transfer to the new owners, potentially exposing users to unforeseen risks.

6. Broader Privacy Implications: Law Enforcement and Family Connections

The conversation broadens to address how genetic data can influence not just the individual but also their relatives. Max Eddy references the Golden State Killer case, where genetic information from public databases was instrumental in identifying the perpetrator after decades.

Max Eddy (12:36): "In 2018, the so-called Golden State Killer was found after 40 years using a combination of genetic information and traditional genealogy research."

While this case demonstrates the positive applications of genetic data, it also raises alarms about potential abuses. The hosts discuss the fine line between beneficial uses and intrusive surveillance, urging listeners to remain vigilant about how their genetic information is utilized.

7. Conclusion and Recommendations

As the episode wraps up, the hosts reiterate the importance of taking control of personal genetic data in light of 23andMe's bankruptcy. They encourage listeners to proactively delete their data to safeguard their privacy and recommend consulting Wirecutter’s detailed guides for further assistance.

Rosie Guerin (15:14): "If you want to find out exactly how to delete your data, you can check out Max's coverage on the Wirecutter website."

The episode serves as a crucial reminder of the persistent and evolving challenges surrounding genetic data privacy, emphasizing that such decisions have far-reaching implications beyond the individual.

Key Takeaways:

• 23andMe's Bankruptcy: Signals potential risks for users regarding their genetic data.
• Privacy Concerns: Genetic data is highly sensitive and not protected under HIPAA.
• Action Steps: Users should download and delete their data promptly, revoke research consents, and opt for sample destruction if desired.
• Broader Implications: Genetic information affects not only individuals but also their relatives and can be misused in various ways.
• Proactive Measures: Staying informed and taking control of personal data is essential in the digital age.

For a detailed, step-by-step guide on deleting your 23andMe data, visit the Wirecutter website and refer to Max Eddy's comprehensive coverage.