I did fair amount of research, and it seems like they take it seriously with GDPR, HIPAA etc. and all the privacy legalities, but obviously Uncle Sam will have his way with it as it's a US based company (California). They will share your DNA if legally compelled.

There is a "permanent delete my data" option, but there's no independent audit that permanent delete actually deletes anything. If you're in EU/California they kinda have to take delete seriously due to GDPR and CCPA, so I think you're safer here.

I've been thinking about this a lot, and I'm not sure how "protectable" your DNA actually is because of how easy it is to get if somebody wants to. Obviously having your DNA in US government is bad, but they likely have it already.

As I'm an EU citizen I will get the data and use the delete option with fingers crossed that US government doesn't want to destroy me for whatever reason. Seems like they have their hands full with other kinds of destruction anyway lol