[zer0defex]

"I try not to use offensive language on HN, but are you fucking kidding me? You actually expect a single company out there to not keep your personal information?"

Yes, I do, actually. This kind of response is exactly the kind of attitude that perpetuates the fly-by-night shady handling of our private information that's all too pervasive these days. This bullshit stops only when laws are on the books that bring down the rain of hell if a mere squeak occurs outside regs - HIPPA is a great example of this.

I've had a 23andme test kit sitting in the closet for years now at this point. I never was able to push past the hesitation they would have my data, forever, and would more than likely be persuaded at some point down the road by the almighty dollar to distribute it, as it didn't come with HIPPA protection.

I don't have all the answers, but I absolutely am game for being a part of the solution.

[pdkl95]

> This bullshit stops only when laws are on the books

Absolutely. Handling personal data[1] absolutely must carry liability. If you move customer data as a black box, common carrier style, then your liability can be limited to a refund. If, on the other hand, you inspect the data in any way, then you're liable for that happens to and everything derived from that

This idea that companies can gather all the data they want without any consequences for mishandling that data is patently unethical.

[1] all personal data, not just "personally identifying information". 2nd and 3rd parties do not get to make the decision about what data is important.