The most private DNA test: 23andMe vs Ancestry vs MyHeritage
Health data privacy23andMe & raw DNA
If you're trying to work out the most private DNA test between 23andMe, AncestryDNA, and MyHeritage, it helps to start with an uncomfortable truth: all three run on the same core model. Your saliva is sequenced, and your genome ends up stored on their servers. So "most private" isn't a matter of kind — it's a matter of degree. This is an honest, criteria-based privacy comparison of the big three, plus the one lever that matters more than which company you pick.
Most "safest DNA test" rankings you'll read online quietly skip the thing that actually determines your privacy. They compare report design, ancestry accuracy, and price, then crown a winner. But the genome is the one file you can never change — a password can be reset after a breach; your DNA cannot — so the real question isn't which company has the nicer app. It's where your genome lives, who can get a copy, and what happens to it if the company changes hands.
That reframing matters because it's the honest one. We can't verify each company's current policies for you — they change, and they differ by country — so this comparison deliberately avoids asserting specific policy details we can't stand behind. Instead, it gives you the criteria and the exact questions to ask, so you can judge any provider (including a future one) for yourself.
Why all three are more alike than different
Before splitting hairs between providers, it's worth being clear about what they share, because it's most of the picture. 23andMe, AncestryDNA, and MyHeritage are all genotyping services: you send a saliva sample, a lab reads a few hundred thousand pre-selected positions in your genome, and the resulting data is stored in the company's database and tied to your account. That stored genome is what powers ancestry matching, trait reports, and relative-finding — and it's also what makes the privacy question permanent.
This shared model is why picking between them is a decision about degree, not kind. Each holds a copy of the one piece of data that uniquely identifies you and implicates blood relatives who never consented. None of them can un-know your genome once it's sequenced. So the useful comparison isn't "which one is private" — none is private in the way an on-device tool is — but "which one gives me the most control, and how do I verify that myself." For the broader landscape of what to do instead, see our guide to the best privacy-first 23andMe alternatives.
The criteria that actually decide privacy
Here's the honest scorecard. Rather than telling you which company "wins" on each — because those answers shift and vary by region — each item is framed as a question you can check against any provider's current terms.
Data storage and ownership
The first question is simply where your genome is kept and who is said to own it. Every consumer test stores your data on company servers, but the terms differ on what rights the company claims over it and how long it's retained. Read the policy for who legally controls the stored genome, whether you can export it in full, and whether "your data" includes the derived results or only the raw file. The practical safeguard, regardless of the answer, is to download your raw file so you always hold an independent copy that doesn't depend on the company's goodwill.
Deletion controls
Storage is only half of it — the other half is whether you can truly get your data out again. Ask two specific things: does deletion actually purge your genome, or merely hide it from your account view? And can you request physical destruction of your saliva sample, separately from deleting the digital data? A company that makes both easy and unambiguous is giving you more real control than one where deletion is buried or partial. When you're ready to act on 23andMe specifically, our step-by-step guide to deleting your 23andMe data walks through it.
Research and sharing defaults
This is the criterion most people underweight, because it's set once at sign-up and rarely revisited. The question isn't only whether a company shares genomes with research or commercial partners — it's whether that sharing is opt-in or on by default. A service where research consent is off until you actively enable it treats your genome more conservatively than one where you're enrolled unless you find and flip a setting. Check the current consent screen for each provider, and look specifically for language about sharing with academic, pharmaceutical, or other third-party partners. This is the single most actionable privacy setting you control while your data is still on their servers.
Law-enforcement stance
Because a stored genome is a database that outside parties may want to reach, how a company handles official requests matters. Ask what the provider's stated policy is on law-enforcement and government requests — whether it requires a warrant, whether it notifies users, and whether it publishes a transparency report. This is an area where policies and legal environments genuinely differ between companies and countries, so it's worth reading each provider's current statement rather than assuming they're identical. The point isn't to alarm — it's that a genome you've kept on your own device is simply not part of this question at all.
Breach and bankruptcy history
Privacy policies describe intentions; history shows what actually happens to a large genetic database under stress. The concrete case here is 23andMe's financial collapse. When a company holding millions of genomes goes through bankruptcy, the database itself becomes an asset that can be sold or transferred to whoever acquires the business — and the privacy terms you agreed to can change hands with it. That's not a hypothetical about one company; it's the clearest real-world illustration of a risk every server-stored genome carries. We cover the mechanics in detail in what happens to your DNA data when a company is sold.
Business model
Finally, follow the money, because it explains the incentives behind everything above. Is the company funded primarily by selling kits (a one-time transaction), by subscriptions (an ongoing relationship), or by research and data partnerships (where your genome is part of the value)? None of these is automatically sinister, but they pull in different directions. A business that monetizes data partnerships has a structural reason to keep and use your genome that a pure kit-sale business does not. Knowing which model you're dealing with tells you what to scrutinize hardest in the policy.
Where whole-genome testing fits
It's worth noting that the big three aren't the only option — some newer services offer whole-genome sequencing, which reads millions of positions instead of the few hundred thousand a genotyping chip covers. That makes the result far more complete and future-proof. But completeness and privacy are separate questions, and it's easy to conflate them. A whole-genome test still stores your data on a company's servers by default, so every criterion above applies to it just as much — arguably more, since there's more of your genome to store. A more thorough test isn't automatically a more private one. What makes any test private is the same thing in every case: keeping and reading the file yourself.
The insight that changes the whole comparison
Work through those criteria for 23andMe, AncestryDNA, and MyHeritage and you'll notice something: the differences are real but marginal, and they can all be revised the next time a company updates its terms or gets acquired. You're comparing promises about how well each will guard a copy of your genome that you handed over. That's a genuinely better-or-worse question — but it's the wrong question to lead with.
The single biggest privacy lever isn't which company you pick. It's whether you keep your own copy and read it on your own device.
Here's why that dominates everything else. Your raw DNA file is a plain-text list of positions and genotypes. Once it's downloaded, it works forever, independent of whether the company survives, gets sold, or changes its policy. If you download your raw data and interpret it locally, no server holds the copy you're reading — so there's nothing to breach, nothing to sell in a bankruptcy, and nothing to hand to a third party. Every risk on the scorecard above is a risk about a server-side copy. Remove the need for that copy and most of the comparison simply dissolves.
You don't have to take this on faith, either. An on-device tool makes a claim you can verify yourself: open your browser's Network tab, use the tool, and watch whether your file ever leaves the machine. Our free DNA explorer reads your file locally in the browser and sends nothing anywhere — you can confirm it in the Network tab as you go. We go deeper on the underlying principle in on-device vs. cloud health-data privacy.
How to get the most private outcome, whichever test you took
Putting it together, the most private path isn't a brand — it's a sequence anyone can follow regardless of which of the three they used:
- Turn off research and data-sharing consent in your account settings, so your genome isn't shared while it's still stored.
- Download your raw DNA file — from AncestryDNA, MyHeritage, or 23andMe — so you own an independent copy.
- Delete the account and request sample destruction where the company offers it, so no server keeps a copy you can't control. Our 23andMe deletion guide is a template for the process.
- Read the file on your own device — start with the free DNA explorer, and if you want your genetics, labs, and Apple Health on one private timeline, bring it together in Quanome, which parses your file on-device and never uploads it.
The honest conclusion of a 23andMe-vs-Ancestry-vs-MyHeritage privacy comparison is a little anticlimactic: the differences between them are smaller than the difference between any of them holding your genome and you holding it yourself. The safest DNA data isn't the data guarded by the company with the best policy. It's the data that lives on hardware you own — read on a device that never sends it anywhere.
The privacy lever no company gives you
Whichever test you took, the most private thing you can do is keep your own copy and read it on your own device. Quanome imports your 23andMe, AncestryDNA, MyHeritage, or whole-genome file, parses it locally — never uploaded to us, and keeps your traits and health-relevant variants on a private timeline next to your labs and Apple Health. Learn more about Quanome →
Frequently asked questions
Which DNA test is the most private?
There's no single winner, because 23andMe, AncestryDNA, and MyHeritage all run on the same core model: your genome is sequenced and stored on their servers. "Most private" is a matter of degree — how easy deletion is, whether research sharing is off by default, and how the company handles law-enforcement requests. The most private outcome doesn't come from picking a company at all; it comes from downloading your raw file and reading it on your own device so no server holds a copy.
Is Ancestry or 23andMe more private?
Both store your genome on their servers, so the honest answer is that they're more alike than different. Rather than trusting a ranking, compare them on the criteria that matter: how research consent is set by default, how clearly you can delete your data and destroy your sample, and how each responds to law-enforcement requests. Those policies change over time, so check each company's current terms yourself before deciding — and download your raw file either way so you're never locked in.
What is the safest DNA test?
The safest test is the one where you keep control of the result. Any consumer test that stores your genome carries the same structural risk: a permanent, uniquely identifying file sitting in a database that could be breached, sold, or transferred. You reduce that risk most not by choosing a brand, but by downloading your raw data, deleting the server-side copy where you can, and reading the file on a device you own.
Does MyHeritage sell your DNA?
We can't verify any specific company's current practices for you, and policies change — so the right move is to read MyHeritage's own privacy policy and consent settings rather than trust a claim. Look specifically for two things: whether your genome can be shared with research or commercial partners, and whether that sharing is opt-in or on by default. The same two questions apply to 23andMe and AncestryDNA.
Can I take a DNA test privately?
Partly. The sampling and sequencing step still requires a company to process your saliva, so that stage isn't fully private with any consumer kit. What you fully control is what happens next: download your raw data, delete the account and request sample destruction where offered, and interpret the file on your own device. That keeps the long-term storage of your genome private even if the test itself wasn't.
How do I keep my DNA data private after testing?
Four steps. Turn off research and data-sharing consent in your account settings. Download your raw DNA file so you own a copy. Delete your account and request sample destruction where the company allows it. Then read the file with an on-device tool that never uploads it, so the only remaining copy of your genome lives on hardware you control.
Do I have to keep my genome on a company's server to read it?
No. Your raw DNA file is a plain-text list of positions and genotypes — once it's on your computer it keeps working forever, independent of whether the company survives. An on-device reader parses that file locally and sends nothing to a server, so you can explore your traits and health-relevant variants without any company holding a copy.
What happened with 23andMe's bankruptcy, and what does it mean for privacy?
23andMe's financial collapse is the concrete example of a risk that applies to every DNA company: when a business holding millions of genomes goes through bankruptcy, the database itself becomes an asset that can be sold or transferred. It's the clearest argument for keeping your own copy and not depending on any single company's servers. Our guide on what happens to DNA data when a company is sold covers the details.
Quanome is live — free on iPhone and Android
Make sense of your DNA and health data privately. Download Quanome free on the App Store or Google Play.
Quanome is free on the App Store and Google Play. Want product news too? Leave your email below.