Source-linked research note
DNA analysis tools privacy comparison
DNA analysis tools handle privacy in materially different ways. Some read a file locally, some upload and delete it after a report, and others keep raw data in an account. Compare the original file, derived results, service access, and deletion separately—then judge privacy alongside evidence quality and usefulness.
Published by DNA Layer · Official documents reviewed 26 August 2026 · DNA Layer is one of the services compared · This is not an independent security auditThe source matrix
The table records what each service currently says in its own public documentation. It does not infer unstated controls, test infrastructure, or calculate a winner. Privacy is one decision axis; output quality, evidence, price, and the job you need done still matter.
What the seven-service review found
The standard workflows divide into three materially different file-handling models: 2 services describe local browser processing, 2 upload the file and document automatic deletion, and 3 retain the file in an account until the user requests or performs deletion. Those counts describe the cited public workflows—not security quality, compliance, or an overall ranking.
| Service | Original-file flow | What remains | Material access | Deletion |
|---|---|---|---|---|
| DNA Layer | Read locally in the browser; the original full file is not intentionally retained by DNA Layer. | Raw file: Original raw file not retained in the browser-based upload flow. Report or derivatives: Supported marker data, evidence records, and generated findings are stored privately for account access. | Specialist service providers may process data to operate the service; identifiable genetic data is not shared with advertisers or data brokers. | Deletion is available by request; data no longer needed is deleted or irreversibly de-identified, subject to legal needs and normal backup expiry. |
| Genetic Lifehacks | The membership workflow reads the selected raw-data file in the browser; the service says it is not transmitted to or stored on its server. | Raw file: The membership workflow keeps data in the browser's temporary cache until the user clears it; separate consultation and cheat-sheet workflows have different offline retention terms. Report or derivatives: Membership topic reports are generated in the browser; the cited pages do not describe server-side storage of the member's genetic data or generated topic report. | The membership workflow says Genetic Lifehacks does not receive or view the file. A separate consultation or cheat-sheet order requires sending genetic data under separately disclosed handling terms. | The member can use Clear Your Data to remove the browser-cached file. For separate consultation work, the policy says files are generally deleted after 30 days and member cheat-sheet files within a few days. |
| Promethease | The DNA file is uploaded to Promethease servers to generate a one-time report. | Raw file: Deleted after report generation; an upload without a generated report is automatically deleted after 24 hours. Report or derivatives: The server copy of the report is deleted after it is emailed; account information remains while the account exists. | Service providers may process data; the policy says DNA information is not sold, licensed, or shared without explicit consent except stated service, legal, and business-transfer cases. | Promethease and MyHeritage accounts can be deleted, but each account must be deleted separately. |
| Genetic Genie | The DNA file is uploaded to a Genetic Genie server and de-identified there. | Raw file: Deleted within 24 hours and usually immediately after processing, according to the cited product page. Report or derivatives: Generated PDFs and other files are not stored for more than 24 hours. | The product page says data is not shared, but staff may occasionally look at data to improve the service. | Automatic file deletion is stated; a separate self-service deletion control is not stated on the cited product page. |
| Sequencing.com | The DNA file is uploaded to and stored in a Sequencing account. | Raw file: Raw data remains in the account until the user deletes data or the account. Report or derivatives: Reports and derived results can remain available in the account. | Authorized personnel and service providers may have limited access; a marketplace report can send the necessary portion of personal information to its third-party developer after authorization. | Account deletion is available in settings. Research already completed and legally required laboratory or deletion records can remain under the policy's stated exceptions. |
| SelfDecode | A raw genotype file is uploaded to the SelfDecode platform and stored with the account to generate and retain personalized insights. | Raw file: The privacy policy says genetic information is retained while the account is open or until the user requests account and data deletion. Report or derivatives: Interpretations and analyses are available through the account; aggregated genetic information may be used for research, product development, and promotional purposes under the stated consent terms. | Service providers may process genetic information; DecodyGPT users consent to masked and anonymized data being sent to OpenAI. Individual-level genetic information is otherwise limited to service providers unless the user gives explicit consent. | Deletion requires an emailed, confirmed request. Stored genetic, laboratory, and self-reported information is discarded, while completed research and legally required records may remain. |
| Genomelink | Raw DNA data is uploaded directly or imported from a supported DNA service and processed in a Genomelink account. | Raw file: The policy treats raw data as account Genetic Information and states no automatic deletion window; users can request deletion through the privacy portal. Report or derivatives: Trait analyses and account information remain available as part of the service. De-identified genetic and self-reported information may enter Genomelink Research only with consent. | Service providers receive data needed to operate the service. Research collaborators require explicit consent; the optional DNAsolves program separately shares a user's name and genetic information with Othram and may compensate Genomelink. | The policy says account, raw data, and personal information are deleted within 30 days of a portal request, with ordinary backup-cycle, legal, completed-sharing, and user-copied-content qualifications. |
Download the complete matrix as JSON or CSV for the versioned methodology, source URLs, and machine-readable service records.
How this comparison was built
- Use official public product and privacy documents only.
- Separate original-file handling from retention of reports or derived genetic data.
- Record material access and deletion qualifications instead of reducing them to a yes-or-no badge.
- Use 'not stated on the cited page' when public documentation does not answer a question.
- Do not calculate an overall winner because the services are designed for different jobs.
The key distinction is between the original full DNA file and derived genetic data. A service can delete the upload while keeping a report, supported markers, account record, or research result. Those artifacts can still reveal sensitive information.
How to use the matrix
- Start with the original file: does it remain on your device, move to a service, or persist in an account?
- Read retention claims twice: once for the upload and again for reports or derived findings.
- Check who may access the data to operate the service and whether a marketplace app creates another boundary.
- Separate automatic deletion from account deletion, backup expiry, legal retention, and completed research.
- Then compare usefulness and evidence. A short retention window does not prove that an interpretation is accurate or clinically appropriate.
Use the broader DNA upload safety guidefor a seven-question checklist, or inspect the full raw DNA tools comparison.
Limits of this research
- The matrix records published commitments and does not test source code, infrastructure, or operational compliance.
- Policies and product behavior can change after the review date.
- A short retention period does not by itself establish clinical quality, security, or suitability for a particular user.
This page is first-party research: DNA Layer is one of the services compared and created the method. There is no affiliate ranking, winner badge, or claim that published policy language proves operational compliance.
Official sources by service
Genetic Lifehacks
Promethease
Genetic Genie
Sequencing.com
Genomelink
Corrections and future reviews
Policies and product behavior can change. If an official source has moved, a qualification is missing, or a recorded commitment is no longer current, email contact@dnalayer.ai. Corrections should name the service, the exact statement, and the official public source that supports the change. The editorial and evidence standards explain how requests are evaluated and when a review date changes.
How to cite this comparison
Suggested citation: DNA Layer. DNA analysis tools privacy source matrix. Version 2026-08-26. Reviewed 26 August 2026. https://www.dnalayer.ai/research/dna-analysis-privacy-comparison
Cite the human-readable comparison for context and the JSON or CSV distribution when reusing the records. Please retain the review date and first-party disclosure: DNA Layer created the method and is one of the services compared. The press and research page provides verified company facts, downloadable product imagery, and a factual-check contact.