Should You Delete Your 23andMe Account? What to Know Before You Decide
The question of whether to delete a 23andMe account has moved from a niche privacy concern to a mainstream one — especially following the company's 2023 data breach and its 2025 bankruptcy filing. If you're weighing this decision, the answer genuinely depends on several factors that vary from person to person. Here's what you need to understand about what deletion actually does, what stays behind, and what variables make this choice different for different users.
What Happens When You Delete Your 23andMe Account
Deleting your account is not the same as deleting your data. 23andMe separates account deletion from genetic data deletion, and understanding that distinction matters a lot.
When you delete your account:
- Your profile and login access are removed
- Your personally identifiable information (name, email, etc.) is scheduled for deletion
- Your genetic data may still be retained unless you take an additional step
To have your genetic sample and data destroyed, you must submit a separate request — specifically asking 23andMe to destroy your physical saliva sample (if it's still stored in their lab) and delete your genotyping data. These are two different actions in their system, and one does not automatically trigger the other.
Why People Are Reconsidering Their Accounts 🔒
Several events have pushed this topic into the spotlight:
The 2023 data breach exposed profile information for approximately 6.9 million users. The breach exploited a feature called DNA Relatives, where attackers used credential stuffing (reusing leaked passwords from other sites) to access accounts and scrape connected profiles. The data exposed included ancestry composition, family relationship details, and some location data — not raw genetic files, but sensitive enough.
23andMe's 2025 bankruptcy raised a different concern: what happens to user data when a company goes through insolvency proceedings? Genetic data is an asset, and in bankruptcy, assets can be sold. 23andMe's privacy policy has historically stated that data won't be sold without user consent, but bankruptcy proceedings can be unpredictable. The California Attorney General and others issued guidance encouraging users to delete their data proactively.
These aren't hypothetical risks — they're documented events that make the calculus different than it was a few years ago.
What You Might Lose by Deleting
Before acting, it's worth knowing what disappears:
- Your health reports — carrier status, disease predispositions, pharmacogenomics results
- Ancestry composition and ethnicity estimates
- DNA Relatives matches — connections to biological relatives who also use the platform
- Family tree data you've built within the app
- Historical reports — some features have been updated over time, and old versions aren't always recoverable
If you've used 23andMe to connect with biological family members or to track hereditary health conditions, deletion means losing that infrastructure. Some of this data can be exported before deletion — 23andMe allows you to download your raw genotyping data as a file — but that file is complex and requires third-party tools (like Promethease or GEDmatch) to interpret.
The Variables That Make This Different for Each Person
| Factor | Why It Matters |
|---|---|
| How you use the data | Health tracking vs. curiosity vs. genealogy research changes the cost of leaving |
| Whether relatives are matched | Active family connections may be lost or disrupted |
| Your raw data export status | Have you already downloaded your data? |
| Your comfort with third-party processing | Alternative platforms carry their own privacy trade-offs |
| Your jurisdiction | GDPR (EU), CCPA (California), and other laws affect your deletion rights and the company's obligations |
| Your original consent settings | Did you opt into biobank research? That data may have different retention rules |
Your consent choices at sign-up are particularly important. If you agreed to participate in 23andMe's research program, your de-identified genetic data may have already been shared with research partners. Deleting your account doesn't retroactively remove data that was already shared under those agreements — though future sharing stops.
How to Actually Delete Everything (Not Just Your Account)
If you decide to proceed, the process involves multiple steps:
- Export your raw data first, if you want to keep it locally
- Go to Settings → 23andMe Data → Delete Data to request genetic data destruction
- Submit a separate request to destroy your physical saliva sample if it's still in storage
- Then proceed with account deletion through the account settings
- Keep confirmation emails — they serve as documentation that requests were submitted
Processing times vary. 23andMe has stated deletion can take 30 days or more, and during bankruptcy proceedings, response timelines may be less predictable.
What Staying Means
Keeping your account isn't inherently reckless, but it does mean accepting ongoing exposure to whatever risks come with the company's current legal and financial situation. If you haven't already, enabling two-factor authentication, using a unique password, and reviewing your privacy and research consent settings are baseline steps regardless of whether you delete.
Some users are taking a middle-ground approach: downloading their raw data, opting out of research, and then deleting — preserving the information locally while removing it from 23andMe's servers. 🧬
The Missing Piece Is Your Situation
The right answer here isn't the same for someone who used 23andMe once out of curiosity, someone actively researching their family health history, or someone who has connected with biological relatives through the platform. The stakes, the losses, and the risks weigh differently depending on what you actually use the service for — and what your personal tolerance for genetic data exposure looks like.