Ancestry shares your personal data with outside companies that help run its services (such as payment processors and marketing vendors) and with business partners offering related products.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Your personal data, potentially including family history and account information, is shared with multiple third-party vendors and business partners. The scope of business partner sharing for marketing purposes is broader than operational service provider sharing.
Interpretive note: The distinction between service provider sharing (operationally limited) and business partner sharing (potentially for independent marketing) has implications for CCPA sale and sharing definitions that depend on the specific contractual and data flow arrangements not fully described in the policy.
The updated Privacy Statement no longer displays a dedicated 'Do Not Sell or Share My Personal Information' link in the footer, which was previously accessible to California residents under CCPA requirements. This link allowed users to exercise data-sharing opt-out rights. The footer now lists 'Consumer Health Privacy' as a separate item but does not explicitly direct users to their CCPA controls. California residents may need to locate their opt-out rights through alternative navigation paths on the Ancestry site.
View change record →The updated privacy policy removes the 'Do Not Sell or Share My Personal Information' link from the footer navigation. This link previously provided direct access to Ancestry's data-sharing opt-out mechanism, which is a required disclosure under California's CCPA. While the removal does not eliminate the opt-out right itself, it may make the opt-out control less easily discoverable from the privacy policy page. Affected users may need to locate the opt-out mechanism through alternate navigation or search methods.
View change record →The updated Privacy Statement clarifies what uses of Ancestry services are permitted and prohibited, establishes that photo face-grouping in your gallery requires your express consent, and introduces SMS messaging as a communication channel for future opt-in communications. The statement now covers Ancestry, AncestryDNA, and Related Brands under a unified framework while noting that other services operated by the company use separate privacy statements. The removal of 'uploaded DNA data' from the account creation section reflects a narrowing of that specific provision's scope, though genetic information processing remains described elsewhere in the policy. You can review the full updated statement to understand how your personal information will be processed and manage your communication preferences when SMS opt-ins become available.
View change record →This detailed provision specifying service provider obligations and limitation of use was replaced with vaguer language in the advertising/analytics section, reducing contractual clarity around data protection.
View full change record →Personal information including contact details, usage data, and account information is shared with service providers and business partners. The distinction between operational service providers (subject to contractual restrictions) and business partners (for potentially independent marketing purposes) is material for consumers concerned about data use beyond Ancestry's platform.
How other platforms handle this
We share Personal Data with vendors, service providers, and agents who work on our behalf and provide us with services related to the purposes described in this Privacy Policy or our Terms of Service.
We will disclose personal information to companies that help us run our business to detect, prevent, or otherwise address fraud, deception, illegal activity, misuse of Adobe Services and Software, and security or technical issues.
We also require these service providers to protect your personal information to at least the same standards that we do.
"We share personal information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. We require these service providers to use your personal information only as necessary to provide services to us and to maintain appropriate security. We may also share information with business partners who offer products or services that may be of interest to you.Excerpt from Ancestry's Privacy Statement
(1) REGULATORY LANDSCAPE: Third-party data sharing engages GDPR Article 28 (processor agreements) for EU users, CCPA/CPRA for California residents (including sale and sharing opt-out rights), and FTC Act consumer protection standards.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Your personal data, potentially including family history and account information, is shared with multiple third-party vendors and business partners. The scope of business partner sharing for marketing purposes is broader than operational service provider sharing.
Personal information including contact details, usage data, and account information is shared with service providers and business partners. The distinction between operational service providers (subject to contractual restrictions) and business partners (for potentially independent marketing purposes) is material for consumers concerned about data use beyond Ancestry's platform.
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.