I just sent in my spit last week and I thought they were very transparent about their data protections. They allow for you to delete your data and deny access by third parties, albeit they require 30 days to process any changes. I'm interested in learning more about my heritage, as well as contributing to genetics research. Maybe their terms have changed over time, but overall I found their explanations to be clear and thorough.