Why do Ancestry, 23, etc keep that data around? Seems like if they really cared about privacy they would destroy any personal data markers and just aggregate what they could anonymize. An analogy is storing customer passwords; you don't need to do that, for authentication you can just store a one-way hash of the passwords and if someone steals database that they haven't gotten much.