Definitely not boilerplate. The privacy policy is quite light, doesn't define terms like "external parties", doesn't even have the company's name or origin.
Yeah I mean Im a one man shop, have no lawyer. The privacy policy is this: we don't store your genome or any identifying information beyond the report which is automatically deleted (or deleted at your request) within 48 hours.
I was talking specifically in the context of OP’s comment. I otherwise agree with you. But the wording that OP seems to complain about simply means that, in order to perform the requested analysis, the company needs to temporarily store your data.
Is there anything else you want to know?