Independent guide. We may earn a commission if you buy through links on this site. This is not medical advice.

Test or SkipOral microbiome testing

Privacy of Your Sample Data

By the Test or Skip editors / / 2 min read

Short answer. Privacy of genetic data matters with microbiome tests because a saliva or swab sample can contain human DNA as well as microbial DNA. Before you order, read what the company keeps, who it shares with and whether you can have your sample and data deleted. If the policy is vague, that is a reason to skip.

Key points

  • A sample can carry your own DNA, not only that of mouth bacteria.
  • Check what is kept, for how long and who can receive it.
  • Research use and data sharing are often optional, so look for the opt-out.
  • Ask whether the physical sample is destroyed after testing.
  • If the policy is unclear, choose another provider or skip the test.

Why a mouth sample is personal data

Saliva and swabs collect cells from your mouth, which means human DNA can end up in the tube alongside the microbes. Some labs try to filter out human sequences during analysis, and others do not describe their process at all.

Even where the human portion is discarded, your report is tied to your name, email and often your address, health questionnaire answers and payment details. All of that is personal information, and it deserves the same care you would give a medical record.

What a privacy policy should tell you

A useful policy says in plain language what the company collects, why, how long it keeps it and whether it keeps the physical sample after testing. It should name the kinds of third parties it shares with, such as lab partners or payment processors, rather than saying only 'trusted partners'.

Be wary of policies that reserve broad rights to use, sell or license data, or that say they may change terms without notice. The way the policy is written is itself information about the company.

  • What data is collected beyond the sample
  • How long data and samples are kept
  • Which types of third parties receive data
  • Whether data can be sold or licensed
  • How to request deletion

Is research use optional?

Many companies ask whether your de-identified results can be used in research. This is often a separate checkbox, and it can usually be declined without losing your report. Read the exact wording, since 'de-identified' does not mean impossible to re-identify, particularly when genetic material is involved.

If the consent is bundled into the general terms with no way to refuse, treat that as a warning sign. Consent that is easy to give but hard to withdraw is not much of a choice.

Deletion, closure and what happens if the company changes hands

Ask three things before you buy. Can I delete my account and results? Is my physical sample destroyed once testing is done? What happens to my data if the company is sold or shuts down? A good policy answers each of these.

Where you live may matter too, since some regions give stronger rights to access, correct and erase personal data. Look for a stated way to make such a request and a contact that is not just a generic form.

Practical steps before you order

Read the privacy policy and consent screens before you pay, not after the kit arrives. Use an email address you do not mind having on file, and avoid answering optional questionnaire items that are not needed to get your result.

If your dentist or doctor is involved, ask how they store and share the report. When you are comparing a test with simply skipping it, remember that good home care and regular dental visits do not require handing over any sample at all.

Questions readers ask

Can insurers or employers see my results?

That depends on the company's policy and local law, so check what it says about sharing and about legal requests. A provider that is clear and restrictive on this point is preferable.

Is a mouth test the same as an ancestry DNA test?

No. Ancestry tests are built to read your own DNA, while microbiome tests aim at microbial DNA. A sample can still contain some of your DNA, which is why the policy matters.

What if I already sent a sample and now regret it?

Contact the company in writing and ask for deletion of your data and destruction of any remaining sample. Keep a copy of your request and any reply.

Talk to a professional. Persistent bleeding, pain, swelling, loose teeth or sores that do not heal need a dentist's attention, not a supplement.

Related reading