{"name":"DNA analysis tools privacy source matrix","version":"2026-08-26","url":"https://www.dnalayer.ai/research/dna-analysis-privacy-scorecard","methodology":{"scope":"Public documentation for consumer raw-DNA analysis workflows. This is a documentation comparison, not an independent security audit.","reviewedOn":"2026-08-26","rules":["Use official public product and privacy documents only.","Separate original-file handling from retention of reports or derived genetic data.","Record material access and deletion qualifications instead of reducing them to a yes-or-no badge.","Use 'not stated on the cited page' when public documentation does not answer a question.","Do not calculate an overall winner because the services are designed for different jobs."]},"services":[{"service":"DNA Layer","fullFileFlow":"Read locally in the browser; the original full file is not intentionally retained by DNA Layer.","rawFileRetention":"Original raw file not retained in the browser-based upload flow.","reportOrDerivedRetention":"Supported marker data, evidence records, and generated findings are stored privately for account access.","materialAccess":"Specialist service providers may process data to operate the service; identifiable genetic data is not shared with advertisers or data brokers.","deletion":"Deletion is available by request; data no longer needed is deleted or irreversibly de-identified, subject to legal needs and normal backup expiry.","sources":["https://www.dnalayer.ai/legal/privacy-policy"]},{"service":"Promethease","fullFileFlow":"The DNA file is uploaded to Promethease servers to generate a one-time report.","rawFileRetention":"Deleted after report generation; an upload without a generated report is automatically deleted after 24 hours.","reportOrDerivedRetention":"The server copy of the report is deleted after it is emailed; account information remains while the account exists.","materialAccess":"Service providers may process data; the policy says DNA information is not sold, licensed, or shared without explicit consent except stated service, legal, and business-transfer cases.","deletion":"Promethease and MyHeritage accounts can be deleted, but each account must be deleted separately.","sources":["https://www.promethease.com/privacy"]},{"service":"Genetic Genie","fullFileFlow":"The DNA file is uploaded to a Genetic Genie server and de-identified there.","rawFileRetention":"Deleted within 24 hours and usually immediately after processing, according to the cited product page.","reportOrDerivedRetention":"Generated PDFs and other files are not stored for more than 24 hours.","materialAccess":"The product page says data is not shared, but staff may occasionally look at data to improve the service.","deletion":"Automatic file deletion is stated; a separate self-service deletion control is not stated on the cited product page.","sources":["https://geneticgenie.org/detox-profile/"]},{"service":"Sequencing.com","fullFileFlow":"The DNA file is uploaded to and stored in a Sequencing account.","rawFileRetention":"Raw data remains in the account until the user deletes data or the account.","reportOrDerivedRetention":"Reports and derived results can remain available in the account.","materialAccess":"Authorized personnel and service providers may have limited access; a marketplace report can send the necessary portion of personal information to its third-party developer after authorization.","deletion":"Account deletion is available in settings. Research already completed and legally required laboratory or deletion records can remain under the policy's stated exceptions.","sources":["https://sequencing.com/knowledge-center/faqs/privacy-first-policy","https://sequencing.com/policies/privacy-policy"]}],"limitations":["The matrix records published commitments and does not test source code, infrastructure, or operational compliance.","Policies and product behavior can change after the review date.","A short retention period does not by itself establish clinical quality, security, or suitability for a particular user."]}