Source-linked research note
DNA analysis tools privacy comparison
DNA analysis tools handle privacy in materially different ways. Some read a file locally, some upload and delete it after a report, and others keep raw data in an account. Compare the original file, derived results, service access, and deletion separately—then judge privacy alongside evidence quality and usefulness.
Published by DNA Layer · Official documents reviewed 26 August 2026 · DNA Layer is one of the services compared · This is not an independent security auditThe source matrix
The table records what each service currently says in its own public documentation. It does not infer unstated controls, test infrastructure, or calculate a winner. Privacy is one decision axis; output quality, evidence, price, and the job you need done still matter.
| Service | Original-file flow | What remains | Material access | Deletion |
|---|---|---|---|---|
| DNA Layer | Read locally in the browser; the original full file is not intentionally retained by DNA Layer. | Raw file: Original raw file not retained in the browser-based upload flow. Report or derivatives: Supported marker data, evidence records, and generated findings are stored privately for account access. | Specialist service providers may process data to operate the service; identifiable genetic data is not shared with advertisers or data brokers. | Deletion is available by request; data no longer needed is deleted or irreversibly de-identified, subject to legal needs and normal backup expiry. |
| Promethease | The DNA file is uploaded to Promethease servers to generate a one-time report. | Raw file: Deleted after report generation; an upload without a generated report is automatically deleted after 24 hours. Report or derivatives: The server copy of the report is deleted after it is emailed; account information remains while the account exists. | Service providers may process data; the policy says DNA information is not sold, licensed, or shared without explicit consent except stated service, legal, and business-transfer cases. | Promethease and MyHeritage accounts can be deleted, but each account must be deleted separately. |
| Genetic Genie | The DNA file is uploaded to a Genetic Genie server and de-identified there. | Raw file: Deleted within 24 hours and usually immediately after processing, according to the cited product page. Report or derivatives: Generated PDFs and other files are not stored for more than 24 hours. | The product page says data is not shared, but staff may occasionally look at data to improve the service. | Automatic file deletion is stated; a separate self-service deletion control is not stated on the cited product page. |
| Sequencing.com | The DNA file is uploaded to and stored in a Sequencing account. | Raw file: Raw data remains in the account until the user deletes data or the account. Report or derivatives: Reports and derived results can remain available in the account. | Authorized personnel and service providers may have limited access; a marketplace report can send the necessary portion of personal information to its third-party developer after authorization. | Account deletion is available in settings. Research already completed and legally required laboratory or deletion records can remain under the policy's stated exceptions. |
Download the complete matrix as JSON for the versioned methodology, source URLs, and machine-readable service records.
How this comparison was built
- Use official public product and privacy documents only.
- Separate original-file handling from retention of reports or derived genetic data.
- Record material access and deletion qualifications instead of reducing them to a yes-or-no badge.
- Use 'not stated on the cited page' when public documentation does not answer a question.
- Do not calculate an overall winner because the services are designed for different jobs.
The key distinction is between the original full DNA file and derived genetic data. A service can delete the upload while keeping a report, supported markers, account record, or research result. Those artifacts can still reveal sensitive information.
How to use the matrix
- Start with the original file: does it remain on your device, move to a service, or persist in an account?
- Read retention claims twice: once for the upload and again for reports or derived findings.
- Check who may access the data to operate the service and whether a marketplace app creates another boundary.
- Separate automatic deletion from account deletion, backup expiry, legal retention, and completed research.
- Then compare usefulness and evidence. A short retention window does not prove that an interpretation is accurate or clinically appropriate.
Use the broader DNA upload safety guidefor a seven-question checklist, or inspect the full raw DNA tools comparison.
Limits of this research
- The matrix records published commitments and does not test source code, infrastructure, or operational compliance.
- Policies and product behavior can change after the review date.
- A short retention period does not by itself establish clinical quality, security, or suitability for a particular user.
This page is first-party research: DNA Layer is one of the services compared and created the method. There is no affiliate ranking, winner badge, or claim that published policy language proves operational compliance.
Official sources by service
Promethease
Genetic Genie
Sequencing.com
Corrections and future reviews
Policies and product behavior can change. If an official source has moved, a qualification is missing, or a recorded commitment is no longer current, email contact@dnalayer.ai. Corrections should name the service, the exact statement, and the official public source that supports the change. The editorial and evidence standards explain how requests are evaluated and when a review date changes.