What actually happens to your saliva, your file and your name

Ten years ago, "is it safe to send off my DNA" was a slightly paranoid question. In 2026 it is just a sensible one, and the reason is easy to point at.

In 2025, 23andMe filed for Chapter 11 bankruptcy. Its assets, including a biobank built from more than 15 million customers, went through a court-supervised sale. In July 2025 they were acquired by TTAM Research Institute, a nonprofit founded by 23andMe's co-founder.

Nothing illegal happened at any point in that process. That is exactly why it unsettled people. It turns out a company holding your genome is a company that can be sold, and the thing being sold includes you.

So the useful question is not the vague one. It is a set of very specific ones, and any company that wants your saliva should be able to answer all of them in a sentence each.

1. Who physically handles my sample, and what happens to it after?

Your GenoPalate saliva sample is analysed in a CLIA-certified and CAP-accredited laboratory in the United States. Those two acronyms matter more than any badge on a website. CLIA is the federal standard that governs clinical labs, and CAP accreditation adds an inspection regime on top of it.

Then, in GenoPalate's own words: “Once your DNA is analyzed by our CLIA-certified lab located in the USA, your sample is securely destroyed.”

That is the sentence to look for at any DNA company. A destroyed sample cannot be re-analysed later for a purpose you never agreed to. A stored one can.

2. Is my name attached to my genome?

No. Every sample is de-identified and stored encrypted. GenoPalate states that “even within our organization, your genetic data is kept separate from your name, email, or any other personal information.”

That internal separation is the part people skip past, and it is one of the most important lines on the page. It means the risk is not just "will they sell it," it is "if something goes wrong inside the building, is the file even attached to a person." Here, the answer is that it is not supposed to be.

3. Do you sell my data?

GenoPalate's answer is four words long: “We don't sell your data. Period.”

They frame the reason bluntly, which we appreciate: you are the customer, not the product. GenoPalate makes money when you buy a report or a membership, not when somebody buys a database.

The published commitment is that “your DNA data is never shared, sold, or used by third-party affiliates.”

4. Could my insurance company or my employer get hold of this?

GenoPalate's commitment: “We will never share your genetic or personal information with insurance companies, employers, or any third parties without your explicit consent.”

There is also a federal law sitting behind that promise, and it is worth knowing about regardless of which company you use. The Genetic Information Nondiscrimination Act of 2008 (GINA) makes it illegal for health insurers to use genetic information to set your eligibility or your premiums, and illegal for employers to use it in hiring, firing or promotion decisions.

5. Will my DNA be used for research?

Only if you say yes. GenoPalate's stated policy is: “We will never use your genetic or personal information for research without first asking for and receiving your explicit consent.”

Note the structure of that sentence. Consent has to be asked for and received. It is not a pre-ticked box in a signup flow, and it is not buried in a terms update.

6. Can I get my data deleted, and can I get a copy?

Both. You can “request the permanent deletion of your DNA data at any time. No questions asked” and you can request a full copy of your own DNA file.

The copy matters more than people realise. If you hold your own file, you are never locked into one company's interpretation of it, and you are never dependent on that company continuing to exist. That is the practical lesson of 2025.

7. What about law enforcement requests?

Here is where we will be straight with you rather than confident.

GenoPalate's published privacy commitments cover selling, third-party affiliates, insurers, employers, research consent and deletion. Law enforcement access is a narrower question with its own legal machinery behind it, and if it is the specific thing you care about, do not accept a summary from an article, including this one.

Read the full privacy policy, and if it is still not clear, ask GenoPalate directly and get the answer in writing. That is what we would tell you to do with any company holding your genome, and we would rather say so than paper over it.

The checklist, so you can grade anyone

Take these to any DNA company, this one included. A company that cannot answer all seven in plain language is telling you something.

• Is the lab CLIA-certified, and where is it physically located?
• Is my physical sample destroyed after analysis, or stored?
• Is my genetic data separated from my name inside your own systems?
• Do you sell, share or license data to third parties, in any form?
• Is research consent opt-in, and can I withdraw it?
• Can I permanently delete my data on request, and how long does it take?
• Can I download a full copy of my own raw file?

GenoPalate publishes an answer to all seven, and you can read them in the company's own words on the DNA privacy page.

What you are actually deciding

The decision is not "do I trust technology." It is narrower than that, and better than that.

You are deciding whether one saliva sample, analysed in a certified US lab, destroyed afterwards, de-identified, never sold, and deletable on request, is worth learning the macronutrient split and the nutrient priorities your body has been running on your entire life without telling you.

For 175,000 people so far, it was.