23andMe has filed for bankruptcy. What does this mean for your DNA data privacy?

The genetic testing company 23andMe has filed for bankruptcy, prompting people who’ve used the service and sent in DNA samples to be analyzed to wonder what will happen to their genetic data.

The company says the filing does not change how it stores, manages or protects customer data. But some privacy experts are recommending that people who have used 23andMe delete their data, given concerns not only about a potential buyer getting access to sensitive information, but also hackers who might take advantage of the upheaval to gain access to it.

“What we’re witnessing with 23andMe is a stark wake-up call for data privacy,” said Adrianus Warmenhoven, a cybersecurity expert at NordVPN. “Genetic data isn’t just a bit of personal information — it is a blueprint of your entire biological profile. When a company goes under, this personal data is an asset to be sold with potentially far-reaching consequences."

23andMe filed for Chapter 11 bankruptcy protection on Sunday. Anne Wojcicki, who co-founded the company nearly two decades ago and has served as its CEO, stepped down effectively immediately. The San Francisco-based company said that it will look to sell “substantially all of its assets” through a court-approved reorganization plan.

Wojcicki's resignation comes just weeks after a board committee rejected a nonbinding acquisition proposal from her to take the company private.

Wojcicki still intends to bid on 23andMe as the company pursues a sale through the bankruptcy process. In a statement on social media, Wojcicki said that she resigned as CEO to be “in the best position” as an independent bidder.

23andMe says that filing for Chapter 11 bankruptcy protection will help facilitate a sale of the company, meaning that it’s seeking new ownership. The company said it wants to pull back on its real estate footprint and has asked the court to reject lease contracts in San Francisco and Sunnyvale, California and elsewhere to help cut costs. But the company plans to keep operating during the process.

In a post about the Chapter 11 process, 23andMe said its users’ privacy and data are important considerations in any transaction and that any buyer will be required to comply with applicable laws when it comes to how it treats customer data.

But experts note that laws have limits — for instance, the U.S. has no federal privacy law and only about 20 states do.

There are also security concerns. For instance, the turmoil of a bankruptcy and related job cuts could leave fewer employees to protect customers' data against hackers. It wouldn't be the first time — a 2023 data breach exposed the genetic data of nearly 7 million customers at 23andMe, which later agreed to pay $30 million in cash to settle a class-action lawsuit accusing the company of failing to protect customers whose personal information was exposed.

Experts note that DNA data is particularly sensitive — and thus valuable.

“At a fundamental biological level, this is you and only you,” said David Choffnes, a computer science professor at Northeastern University and executive director of its Cybersecurity and Privacy Institute. “If you have an email address that gets compromised, you can find another email provider and start using a new email address. And you’re pretty much able to move on with your life without problem. And you just can’t do that with your genetic code.”

23andMe says it does not share information with health insurance companies, employers or public databases without users' consent and with law enforcement only if required by a valid legal process, such as a subpoena. Choffnes said while that's good, it's a fairly narrow set of categories.

“There’s still other things that they are allowed to do with that data, including, as they mentioned, provide cross context, behavioral or targeted advertising,” he said. “So, you know, in a sense, even if they aren’t sending your personal data to an advertiser, there’s a long line of research that identifies how third parties can re-identify you from de-identified data by looking for patterns in it. And so if they’re targeting you with advertisements, for example, based on some information that they have about your genetic data, there’s probably a way that other parties could piece together other information they have access to.”

California Attorney General Rob Bonta issued an urgent consumer alert Friday — before 23andMe filed for bankruptcy — noting the company's financial distress and reminding people they have the right to have their data deleted.

If you have a 23andMe account, you can delete your data by logging in and going to “settings” and scrolling to a section called “23andMe Data” at the bottom of the page. Then, click “View,” download it if you want a copy then go to the “Delete Data” section and click “Permanently Delete Data.” 23andMe will email you to confirm and you will need to follow the link in the email to confirm your deletion request.

If you previously asked 23andMe to store your saliva sample and DNA, you can also ask that it be destroyed by going to your account settings and clicking on “Preferences.” And you can withdraw consent to third-party researchers to use your genetic data and sample under “Research and Product Consents.”

This March 25, 2025 photo shows a 23andMe saliva collection kit in Oakland, Calif. (AP Photo/Barbara Ortutay)

SAN FRANCISCO (AP) — Getting a scalp or face massage is often a relaxing highlight of getting a haircut or a facial. Now, head spas are popping up across the country offering deep cranial and facial relaxation.

“Typically, when you go get a massage, the focus is always like your back, and I always wish there was more on my head, on my face especially, on my neck,” says Karena Kong, a frequent customer of Nen Head Spa in San Francisco. “When I saw that they give 90 minutes of just head, face, shoulder massage, I felt like it’s a great way to just focus on the areas that I love.”

Head spas originated in Japan, rooted in centuries-old practices that combine massage and herbal tinctures. Modern versions began gaining popularity in Japanese salons in the 1990s before spreading throughout Asia and now the U.S.

A typical session lasts 60 or 90 minutes and often begins with a scalp inspection, followed by deep cleansing, exfoliation, steam, and extended head, face and neck massage. Many services also include essential oils, conditioning masks, and aromatherapy in a quiet setting with dimmed lights and soft music.

“The core part of it is actually getting your hair washed,” said Peter Tham, owner of Nen Head Spa, where head massages cost about $100 an hour. “The feeling of getting your head washed, especially on a hot and humid day, feels really good. Combine that with, facial, scalp, neck and shoulder massages, which is kind of where most people, especially those who sit in front of a computer all day, suffer a lot of tension.”

Some head spas make health and medical claims about some of their services, suggesting they can offer stress relief or treatment for scalp skin conditions, hair loss or even alopecia, an autoimmune disorder. Experts caution that people with skin or hair conditions should see a dermatologist or other appropriate doctor for advice and possible treatment.

“It’s important to know and differentiate something that’s done for a health reason or relaxation from seeing a medical expert, a dermatologist, if you are having hair loss,” said Zakia Rahman, a dermatology professor at Stanford University School of Medicine.

Rahman has noticed the rising popularity of head spas and says they are generally fine as a compliment to actual medical treatments if needed — and for people who like the way it makes them feel.

At Sunday Headspa in San Francisco, each session starts with a technician inspecting hair follicles with a magnifying device and assessing their condition. Then customers get a deep clean, said Jolly Mac, the spa’s coordinator.

Many of their clients first discovered head spa services in Asia and are looking for similar services, which start at about $200 an hour.

Customer Crystle Vitari, first visited a head spa while visiting South Korea and finds it “rejuvenating” — and relaxing.

“Every time, I fall asleep and take a nap, actually, because it’s so relaxing," she said.

Associated Press writer Olga R. Rodriguez contributed to this story.

Liz Evans, bottom, wears a warm misting cap, which produces nano mist that hydrates the scalp and hair, as head spa specialist Ha Truong performs a treatment at Sunday Headspa Thursday, April 16, 2026, in San Francisco. (AP Photo/Jeff Chiu)

Head spa specialist Ha Truong applies a halo waterfall device to Liz Evans, left, during a treatment at Sunday Headspa Thursday, April 16, 2026, in San Francisco. (AP Photo/Jeff Chiu)

Head spa specialist Ha Truong, right, applies shampoo to Liz Evans during a treatment at Sunday Headspa Thursday, April 16, 2026, in San Francisco. (AP Photo/Jeff Chiu)

Head spa specialist Ha Truong, right, uses a Red and Blue light brush on Liz Evans to help with hair growth and reduce bacteria while massaging the scalp to help the scalp serum absorb during a treatment at Sunday Headspa Thursday, April 16, 2026, in San Francisco. (AP Photo/Jeff Chiu)

Head spa specialist Ha Truong, right, uses a Red and Blue light brush on Liz Evans to help with hair growth and reduce bacteria while massaging the scalp to help the scalp serum absorb during a treatment at Sunday Headspa Thursday, April 16, 2026, in San Francisco. (AP Photo/Jeff Chiu)