23andMe used a custom Illumina Infinium microarray designed around segments of particular interest.
There is a "permanent delete my data" option, but there's no independent audit that permanent delete actually deletes anything. If you're in EU/California they kinda have to take delete seriously due to GDPR and CCPA, so I think you're safer here.
I've been thinking about this a lot, and I'm not sure how "protectable" your DNA actually is because of how easy it is to get if somebody wants to. Obviously having your DNA in US government is bad, but they likely have it already.
As I'm an EU citizen I will get the data and use the delete option with fingers crossed that US government doesn't want to destroy me for whatever reason. Seems like they have their hands full with other kinds of destruction anyway lol
It's unlikely that they would luck into testing some unknown SNP which turned out to be relevant for disease.
Those SNP's i believe are testd from primers
so what 23andMe does is specifically on the back of previous research and afaik their data isnt technically clinically significant as most findings need confirmation or more tests.