23andMe Results
and Life Insurance

The direct answer: 23andMe does not share your data with life insurance companies. By policy and by law (the California Consumer Privacy Act and 23andMe's own privacy terms), your genetic data is not sold or disclosed to insurers. However, the more important question is whether a life insurer can access your results through other channels. If you've had clinical genetic testing (through a doctor or hospital) based on 23andMe findings, those clinical results may appear in your medical records — which insurers can access via HIPAA authorization during underwriting. The DTC test itself doesn't flow to insurers; clinical follow-up tests may.

This is one of the most common and consequential questions about DTC genetic testing and life insurance. The answer depends on how the application question is worded. Most life insurance applications ask questions like: "Have you been diagnosed with or treated for any genetic disorder?" or "Have you had any genetic testing that revealed elevated health risks?" A 23andMe result is not a clinical diagnosis — it's a consumer service. However, if you then saw a doctor who ordered clinical genetic testing that confirmed the variant, that IS a clinical result that may require disclosure. The nuance matters: DTC result alone may not require disclosure depending on application wording; clinical confirmation of that result typically does. When in doubt, consult an attorney or genetic counselor familiar with insurance disclosure in your state.

As of 2026, 23andMe's FDA-authorized health reports include: BRCA1/BRCA2 Selected Variants (3 specific variants, not full sequencing — covers founder mutations most common in Ashkenazi Jewish populations). Note: 23andMe tests only 3 of 1,000+ BRCA variants — a negative result does NOT rule out BRCA status. APOE ε4 (Alzheimer's risk). Hereditary Thrombophilia (Factor V Leiden, Prothrombin G20210A). Alpha-1 Antitrypsin Deficiency. Familial Hypercholesterolemia (selected variants). Hereditary Hemochromatosis (HFE variants). MUTYH-Associated Polyposis. Lynch syndrome variants (selected). Each of these has potential life insurance implications if used to pursue clinical follow-up testing that enters your medical record.

23andMe tests for 3 BRCA variants (specifically the three most common founder mutations in Ashkenazi Jewish populations: BRCA1 185delAG, BRCA1 5382insC, and BRCA2 6174delT). Clinical BRCA testing (from companies like Myriad, Ambry, or through academic medical centers) sequences the entire BRCA1 and BRCA2 genes, checking for all 1,000+ known variants. A negative 23andMe BRCA result does not mean you don't have a BRCA mutation — it means you don't have those 3 specific variants. If you have family history of BRCA-related cancers, a negative 23andMe result should still prompt clinical genetic counseling. For insurance purposes: 23andMe BRCA negative is essentially meaningless. Only clinical full-gene sequencing provides true negative status.

APOE ε4 is the strongest genetic risk factor for late-onset Alzheimer's disease. Approximately 25% of the population carries one ε4 allele (heterozygous); approximately 2-3% carry two copies (homozygous ε4). Heterozygous ε4 carriers have roughly 3-4× elevated lifetime Alzheimer's risk. Homozygous ε4 carriers have roughly 8-12× elevated risk. Life insurance and Alzheimer's: APOE ε4 is currently one of the most contentious areas in genetic privacy law. As of 2026, most life insurers do not test for APOE ε4 directly, and DTC results don't flow to insurers. However, if clinical APOE testing enters your medical record (from a physician workup), it could become visible during underwriting. The GINA gap applies — life insurers in most states could legally use this information.

In 2023, 23andMe suffered a significant data breach affecting approximately 6.9 million users. Stolen data included ancestry composition, DNA relatives matches, and limited health data. While this data was not sold to insurance companies and would not typically be accessible through standard underwriting channels, the breach raises legitimate questions about data security for genetic information. As of 2026, there is no documented case of insurance companies obtaining or using data from this breach in underwriting decisions. If you are concerned, 23andMe offers options to delete your account and data.

The most important step: understand your state's genetic privacy protections for life insurance. If you live in California, Florida, New York, New Jersey, Massachusetts, or other protective states, life insurers have limited ability to use genetic information in underwriting. If you live in a state without protections, consider whether you want life insurance coverage secured before accessing your 23andMe health reports — particularly BRCA and APOE results. See the insurance-before-testing section below and our GINA state guide for the full picture. This is not about avoiding disclosure — it's about timing and protecting your options.

Deleting your 23andMe account removes your data from their systems (they offer full deletion including genetic data). This means 23andMe cannot share data they no longer hold. However, deletion does not: (1) erase any clinical follow-up testing that resulted from 23andMe findings — those results exist in medical records independently, (2) affect any data that may have been compromised in the 2023 breach, or (3) undo disclosure you may have already made on insurance applications. Deletion is a reasonable privacy measure but is not a complete solution once clinical follow-up has occurred or disclosures have been made.