I used family tree dna. Not really much in the way of guarantees on data privacy as you'd expect (at least not from a software developer's perspective), but I figure it's challenging enough to abuse knowledge of my exact mitochondrial haplogroup, that if someone can do that, they can do worse anyway.