23andMe Privacy Statement

This document explains how 23andMe handles your personal and genetic data across its websites, app, and services. You control whether your biological sample is stored and whether you participate in research features like DNA Relatives — but be aware that deleting your account or choosing to discard your sample are permanent, irreversible actions. If you use Telehealth Services through 23andMe, a separate privacy notice — not this one — governs your medical information.

This Privacy Statement governs all websites owned and operated by 23andMe Research Institute, the 23andMe mobile app, and any related Services. It establishes user rights to control research participation — including the ability to opt out of research at any time — and over biological sample storage, with a default of secure destruction after laboratory completion if storage is not elected. Key irreversibility provisions apply: account deletion cannot be cancelled or reversed and automatically opts the user out of Research and discards their sample, and a choice to discard a sample cannot be reversed. Users who choose to participate in research have their deidentified data pooled with other participants, and users who access Telehealth Services coordinated through 23andMe are governed by a separate Medical Record Privacy Notice rather than this Statement.

As a 23andMe user, you retain ongoing control over research participation and can opt out at any time, and you decide whether to share data through features like DNA Relatives and Your Connections. Your biological sample will be securely destroyed after laboratory work unless you actively choose storage. If you delete your account, 23andMe will automatically opt you out of Research and discard your sample, and neither the account deletion nor a sample discard choice can be reversed — so these decisions are final. If you have privacy questions or complaints, you can contact 23andMe's Privacy Administrator at privacy@23andme.com or by calling 1.800.239.5230.