A direct-to-consumer genetic testing company that analyzes saliva samples to provide users with ancestry information and health-related genetic reports. The company collects highly sensitive genetic and personal health data, making their privacy policies particularly important for understanding how this irreversible biometric information is stored, shared, and potentially used for research purposes. Their terms of service govern user rights regarding genetic data ownership and deletion, which have significant long-term implications for consumers.

2 Documents
55 All provisions 23 High severity 30 Medium severity 2 Low severity
2 Changes · 12 mo
Jul 9, 2026 Last change

High, provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium, provisions worth knowing about but with partial protections or limited scope. Low, standard terms with minimal consumer impact.

Governance Coverage
Acceptable Use
8 provisions · 6 high · 2 med
Liability Limitation
6 provisions · 4 high · 2 med
Contract Terms
6 provisions · 3 high · 3 med
Data Usage
5 provisions · 2 high · 3 med
Refunds
4 provisions · 1 high · 3 med
Privacy Rights
4 provisions · 2 high · 2 med
Policy Changes
3 provisions · 2 high · 1 med
Disclosure Requirements
3 provisions · 2 med
Account Control
2 provisions · 1 med
Other
1 provision · 1 high
Key Governance Provisions
High Sample must be own or authorized minor

This representation restricts sample submission to three defined categories of authorization, barring submission of samples on behalf of others without legal authority.

High Minimum age requirement eighteen years

The minimum age requirement establishes that minors may not independently agree to the Terms or use the Services.

High Product development includes commercialization with third parties

The clause discloses that data analysis conducted by 23andMe may result in commercial arrangements involving third parties, which is a material data-sharing consideration.

High Genetic information for research and education only

The 'only' qualifier restricts all other uses of 23andMe's Genetic Information, which has direct bearing on how users may lawfully apply their results.

High Services not for medical decisions or treatment

This clause explicitly excludes current health assessment and medical decision-making — including medication decisions — from the intended scope of the Services.

Document Coverage
Privacypolicy Termsofservice
Last change detected: Jul 9, 2026 Changes (12 months): 2 Documents monitored: 2 Provisions tracked: 55
Compare With Similar Platforms
Calm CVS Health Fitbit Garmin GoodRx Headspace MyFitnessPal Noom

Documents

23andMe Privacy Statement

High

This document explains how 23andMe handles your personal and genetic data across its websites, app, and services. You control whether your biological sample is stored and whether you participate in …

Last updated May 5, 2026 · Privacy policy
7 provisions 6 versions captured Version history →

23andMe Terms of Service

High

These Terms set the rules for using 23andMe's Services: you must be at least 18, you cannot be an insurance company or employer, and you can only submit your own …

Last updated May 5, 2026 · Terms of service
8 provisions 4 versions captured Version history →
📈 Policy Drift Analysis View all changes →

High Severity Provisions (23)

View all high severity provisions → Compare 23andMe with other platforms →

Applicable Regulations

BIPA
Illinois, USA
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
HIPAA
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗

Related Analysis

Privacy · April 16, 2026
23andMe Is Bankrupt. What Happens to Your DNA Now?

Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do…

Compare with Similar Platforms

Calm
health
CVS Health
health
Fitbit
health
Garmin
health
GoodRx
health
Headspace
health
MyFitnessPal
health
Noom
health

Frequently Asked Questions

What 23andMe documents does ConductAtlas track?

ConductAtlas tracks 2 23andMe documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has 23andMe made in the past year?

23andMe has made 2 policy changes in the past 12 months across the documents ConductAtlas tracks.

How many provisions has ConductAtlas classified for 23andMe?

ConductAtlas has classified 55 provisions across 23andMe's tracked documents. 23 are rated high severity, 30 medium, and 2 low.

Can I get alerts when 23andMe changes their policies?

Yes. Monitor subscribers ($4.99/month) can add 23andMe to their watchlist and receive same-day email alerts whenever any tracked document changes.