from Hacker News

Ask HN: Is there a DNA/genealogy site you trust?

by CoreSet on 9/6/20, 11:52 PM with 15 comments

I’m really interested in 23 and me and the general building-a-family-tree-via-DNA service, but, like a lot of people, are concerned about my genetic info being later resold.

Is there a service HNers could recommend for the privacy conscious?

  • by bjourne on 9/7/20, 12:29 AM

    No, stay away. Even if a company is trustworthy today, it doesn't mean that it won't update its Terms of Service tomorrow/be bought.

  • by ig1 on 9/7/20, 3:15 PM

    If you want to use it for family tree research you basically have to go to the companies that have the largest databases, because that's where you'll find familial matches (e.g. 23andme and AncestryDNA).

    23andme has a better track record of refusing governmental requests than AncestryDNA.

    In terms of genetic information sharing, none of the providers shares non-anonymized data. 23andme allows an opt-out for sharing anonymized data.

    You can also do the tests pseudo-anonymously, while they ask you to provide your real name, etc. you don't actually have to do so. You can purchase a test kit at a retail store for cash and register online with a fake name if you wish to do so.

  • by xmodem on 9/7/20, 8:51 AM

    I did 23andme earlier this year for the health information. After much deliberation about the privacy risks, I decided the tradeoff was worth it.

    I looked at the family tree/genealogy data as well, and I was stunned how many of my close relatives were in there.

    It does depends on exactly what your fears are about how the data will be used, but to some extent the ubiquity of these services means the privacy of your genetic information has already been violated regardless of wether you choose to use them yourself.

  • by sneak on 9/7/20, 2:28 AM

    My approach was to buy a temporary domain with a cash prepaid gift card, register it with a fake name from a VPN, set up email (also via VPN), do the DNA thing (via VPN) with a fake name and an email address at the new domain, download my data (VPN), then delete the account.

    The only thing linking it to my existing identity is the actual DNA data itself, which is probably insufficient for insurance companies or data brokers to relate it to my existing records for discrimination purposes.

  • by giantg2 on 9/7/20, 12:17 AM

    I'm not sure. Supposedly 23andMe will delete your data completely upon your request. So you could sign up, print your reports, then request deletion.