23andMe · 23andMe Privacy Statement

Account Deletion and Irreversibility

Medium severity
Share 𝕏 Share in Share 🔒 PDF

What it is

You can close your 23andMe account at any time, which will stop your participation in research and destroy your DNA sample — but once you do this, it cannot be undone and you will lose access to all your genetic results.

Consumer impact (what this means for users)

Deleting your account is the most comprehensive privacy action available, but it permanently removes your access to all genetic test results and reports you paid for, making it a significant financial and informational trade-off. Users should export all their data before initiating deletion.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Before deleting your account, log in at https://you.23andme.com/, navigate to Settings, and download your raw genetic data and reports using the data download option. Then proceed to account deletion only after confirming your data export is complete.

Cross-platform context

See how other platforms handle Account Deletion and Irreversibility and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Account deletion is permanent — you lose all access to your genetic reports, ancestry data, and health insights, and you cannot restore your account or data after deletion.

View original clause language
You can delete your 23andMe account any time. If you do, we will automatically opt you out of Research and discard your sample. Keep in mind this process cannot be cancelled or reversed.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: GDPR Art. 17 establishes the right to erasure, which account deletion partially implements, but as noted elsewhere the research exemption under Art. 17(3)(d) limits the scope of erasure for research participants. CCPA §1798.105 provides a parallel deletion right. The irreversibility of deletion is a design choice that may conflict with GDPR Art. 7(3)'s requirement that withdrawal of consent be as easy as giving it — if account creation is straightforward but deletion is irreversible and results in loss of paid service, this asymmetry warrants scrutiny.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has consumer protection jurisdiction over disclosures regarding permanent loss of access to purchased digital services upon account deletion, including whether such terms are adequately disclosed under FTC Act Section 5.
    File a complaint →

Provision details

Document information
Document
23andMe Privacy Statement
Entity
23andMe
Document last updated
April 29, 2026
Tracking information
First tracked
April 27, 2026
Last verified
April 27, 2026
Record ID
CA-P-003470
Document ID
CA-D-00148
Evidence Provenance
Source URL
Wayback Machine
SHA-256
dc3df5a6c7d5e8a0428d5086d3cf2f15f5072911b18402048166183c31b60dd4
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: 23andMe | Document: 23andMe Privacy Statement | Record: CA-P-003470
Captured: 2026-04-27 13:30:15 UTC | SHA-256: dc3df5a6c7d5e8a0…
URL: https://conductatlas.com/platform/23andme/23andme-privacy-statement/account-deletion-and-irreversibility/
Accessed: May 2, 2026
Classification
Severity
Medium
Categories

Other provisions in this document