Medical Oncologist
CION Cancer Clinics
At-home DNA tests: what happens to your genetic data | CION Cancer Clinics
An at-home DNA kit is not the same as a clinical genetic test, and what happens to your data depends on the company's terms more than on medical rules. Many kits check only a few spots in a gene. This page explains what these companies can do with your DNA, what Indian law now says, and what to check before you send a sample. At CION Cancer Clinics, our team helps carriers and their families plan checks, next steps and support after a genetic result.
NG
Medically reviewed by Dr. Naresh GunduConsultant Medical Oncologist · MBBS, DNB (Internal Medicine), DM (Medical Oncology, AIIMS) · last reviewed September 2026, next review due September 2027
17+specialists on panel
15,000+patients treated
35+centres across Telangana & AP
4.8★ / 800+Google rating
On this page
- What happens to my DNA when I send it to a consumer company?
- What might a consumer company do with my data?
- What should I check before buying a DNA kit?
- The words you will meet in a DNA company's terms
- A consumer kit and a clinical test, compared
- Four things people assume about DNA kits
- What this page cannot tell you
- Common questions about DNA kits and your data
The short answer
What happens to my DNA when I send it to a consumer company?
It becomes data the company stores, analyses and, depending on the terms you accepted, may share. A clinical laboratory works under medical confidentiality and a doctor's request. A consumer company works mainly under its own privacy policy and general data protection law.
Why this is different from a hospital test
When your oncologist orders an inherited cancer test, the result goes to a doctor, is explained by a counsellor and sits in your medical record. A kit bought online sends the result straight to you, often with nobody to explain it. The raw data file stays with the company, sometimes on servers outside India.
Why it matters more for DNA than for other data
You can change a password. You cannot change your DNA. It also carries partial information about your parents, brothers, sisters and children, none of whom agreed to the test. A decision made on a phone in a few minutes can follow a family for a long time.
Reading the privacy policy before you send a sample is the one moment you have full control.Read the terms for these
What might a consumer company do with my data?
Policies differ, but these are the four uses to look for in any set of terms.
Give you a report
The service you paid for: ancestry, traits, wellness or a limited health risk report. For cancer, many kits look at a handful of known spots in a gene rather than reading the whole gene.
What that means
- A clear result does not rule out an inherited fault
- A worrying result needs confirming in a clinical laboratory
Use it for research
Many companies ask to use customer data in their own research or with partners. This should be a separate choice you opt into, not a line buried in the general terms.
Share it with partners
Some policies allow coded data to be shared with drug companies or other researchers, sometimes for payment. Look for who the partners are and whether you can refuse.
Keep it after a sale or closure
If a company is sold or closes, its data can pass to the new owner as a business asset. This happened when a large US consumer genetics company went through bankruptcy in 2025.
The promise you accepted may not bind whoever buys the company.Not sure whether this applies to you?
Ask an oncologistBefore you order
What should I check before buying a DNA kit?
Where the data is stored
Ask whether your sample is analysed in India or sent abroad, and where the data file sits afterwards. The answer should be in writing, not only in an advert.
Whether research is opt-in
Research use should stay switched off until you choose to turn it on. If it is on by default, switch it off before sending the sample.
How to delete data and destroy the sample
A good policy explains how to close the account, delete the data and have the physical sample destroyed, and how long each step takes.
Who explains a health result
If the kit reports on cancer genes, ask whether a genetic counsellor is included. If not, you will be reading a risk report on your own, often late at night.
What happens if the company is sold
Look for a promise that your data will not move to a new owner without fresh consent. Many policies make no such promise.
In the small print
The words you will meet in a DNA company's terms
- Raw data
- The file of genetic readings the company produced. You can usually download it. It is not a medical report and has not been checked to clinical standards.
- Genotyping
- Checking a set of pre-chosen spots in your DNA rather than reading whole genes letter by letter. Cheaper and faster, but it misses most faults.
- Sequencing
- Reading a stretch of DNA letter by letter. Clinical inherited cancer tests usually read the whole of each relevant gene.
- Opt-in
- You are included only if you actively agree. Its opposite, opt-out, includes you unless you say no.
- Data fiduciary
- The term India's data protection law uses for an organisation that decides how your personal data is used. It carries the legal duties.
- Withdrawing consent
- Taking back your permission. Under Indian law it should be as easy to withdraw consent as it was to give it.
Leave a number, we will call you
One field. No form to fill in, and no charge for the call.
Side by side
A consumer kit and a clinical test, compared
Consumer kit
Clinical test ordered by a doctor
Result sent straight to you
Result goes to the doctor who ordered it
Often checks selected spots in a gene
Usually reads the whole of each gene
Counselling may not be included
Counselling before and after is the standard
Data governed mainly by the company's terms
Data also covered by medical confidentiality
A health finding needs confirming first
A result your care team can act on
Commonly believed
Four things people assume about DNA kits
"The kit said I have no BRCA fault, so I am in the clear."
Many kits check only a few known changes out of thousands that can break these genes. A clear kit result says little about the rest. If your family history is worrying, a full clinical test is the right route.
"My data is anonymous, so it does not matter who has it."
Names can be removed, but DNA is unique, and relatives who have uploaded their own data can help identify people. Anonymous is a promise about process, not a fact about DNA.
"Indian law stops companies sharing my data with anyone."
The Digital Personal Data Protection Act 2023 requires consent for most uses and lets you withdraw it. But it does not treat genetic data as a special category, and many of its duties are still being phased in. The terms you accept still matter.
"Deleting my account deletes my sample."
Not always. The data file, the stored sample and any data already shared with research partners are often handled separately. Ask for each one to be dealt with, in writing.
Being straight with you
What this page cannot tell you
It cannot tell you whether a particular company is safe to use. Policies change, companies are bought and sold, and no page can keep up with every one. Read the current policy yourself and keep a copy of what you agreed to on the day you agreed to it.
It cannot interpret a kit result
If a consumer report flags a cancer gene, do not act on it alone. Take it to a genetic counsellor, who will usually arrange a clinical test to confirm or rule it out. What your specific variant means is a question for the counsellor who orders that test.
Who this does not apply to
If your test was ordered by your oncologist and done by a clinical laboratory, most of this page does not apply to you. Tumour testing to choose a treatment is different again and is covered under targeted therapy. If you only want to know your ancestry, the privacy points apply but the cancer points do not.
Questions we are asked
Common questions about DNA kits and your data
Can a DNA kit tell me my cancer risk?
Only partly. Most kits look at selected changes in a few genes and cannot replace a clinical test. Studies have found that some faults flagged in raw data files were not confirmed when properly retested. Treat a kit result as a reason to see a counsellor, never as an answer.
Can I make a company delete my data in India?
Under the Digital Personal Data Protection Act 2023 you can withdraw consent and ask for your personal data to be erased, subject to anything another law requires the company to keep. Make the request in writing and ask for confirmation, including for the physical sample.
Does the Indian law apply to a foreign company?
The Act covers processing outside India when it is connected to offering goods or services to people in India. Enforcing it against a company based abroad is another matter, and that has barely been tested yet.
Should I upload my raw data to free interpretation websites?
Think carefully first. These sites have their own terms, may reuse the data and often produce alarming reports that do not hold up. If you are worried about a cancer gene, a counsellor-led clinical test is the safer route.
Can the police or a court get my data?
Company policies usually allow disclosure when the law requires it, and Indian data protection law permits some processing for legal and investigative purposes. Read the section of the policy on law enforcement requests before you send a sample.
Could an insurer see my kit result?
Not directly, unless you share it or the company does. But if a proposal form asks about genetic tests, a kit result may count as one. Our page on disclosure on a proposal form explains how to answer honestly.
Is a kit a cheaper way to check the whole family?
No. For inherited cancer, the right order is a clinical test on the relative who had cancer, then a targeted test for others if a fault is found. A kit for each relative adds cost without giving the same answer.
What should I do with a worrying kit result?
Do not change anything yet, and do not book surgery or scans on the strength of it. Take the report to a genetic counsellor or your oncologist. They will usually arrange confirmation in a clinical laboratory before any decision is made.
Your Specialists
Meet CION's oncologists. Bring your family history or genetic report to them.
Our medical oncologists see people with a strong family history of cancer, arrange genetic counselling and testing where it fits, and plan the checks that follow.
Medical Oncologist
Dr. C. Raghavendra Reddy
MBBS(Gold Medal), DNB(General Medicine), DM(Medical Oncology)(Gold Medal)
Medical Oncologist
Dr. Bharati Devi Gorantla
MBBS, MD(General Medicine), DM(Medical Oncology)(Adyar,Chennai), ECMO, MRCP SCE(UK)
Medical Oncologist
Dr. Owais Mohammed
MBBS, MD (General Medicine), DrNB (Medical Oncology), ECMO, MRCP SCE (Medical Oncology) (UK)
Medical Oncologist
Medical Oncologist
Want a specific doctor for your case? Mention them when booking.
Book Free ConsultationBook an appointment with our specialist
Share your name and number — we'll call you back within 30 minutes to schedule your consultation.
Sources
- MedlinePlus Genetics — What is direct-to-consumer genetic testing?
- Federal Trade Commission — Keep people's sensitive DNA information private
- Ministry of Electronics and Information Technology — The Digital Personal Data Protection Act, 2023 (No. 22 of 2023)
- National Cancer Institute — Genetic Testing for Inherited Cancer Susceptibility Syndromes
This page is general information, not a prescription. Do not change or stop any treatment based on what you read here. If anything is worrying you, contact your own treating team — or call our helpline and we will help you reach the right specialist.
Keep reading
Related pages
Your genetic data under the DPDP Act 2023The rights Indian law gives you over your DNA dataConsent for research use of your sampleWhat agreeing to research actually allowsSending samples abroad: the rulesWhat applies when a sample leaves IndiaDo you have to disclose a genetic result on a proposal form?Whether a kit result counts when you buy insurance
Talk to us
Did a DNA kit flag a cancer gene?
Bring the report to a genetic counsellor before you act on it. We will explain what it can and cannot show, and arrange a clinical test if one is needed. One helpline serves every CION centre.