Your DNA, Their Investigation: The Privacy Warning UsefulCharts Left Out
A genealogy website promised users control over police access to their DNA. A court order overrode that choice. A security breach exposed protected profiles. And investigators later bypassed consent settings deliberately.
Yet in a September 2022 video recommending five websites for uploading genetic data, Matt Baker of UsefulCharts assured viewers that GEDmatch allowed them to decline police access while maintaining their privacy.
The reassurance was dangerously incomplete.
Baker's video, I Uploaded My DNA to Genomelink, My True Ancestry, GEDmatch, Promethease, and Genetic Lifehacks, is an accessible demonstration of consumer genetic services. It explains ancestry reports, historical DNA matches, relative searches, and genetic health information.
Much of that explanation is useful.
But when the subject turns to GEDmatch, Baker moves from describing a feature to reassuring viewers about something far more consequential: control over their genetic information.
He tells them that opting out of police searches allows them to maintain their privacy. He also recommends GEDmatch as the essential destination for anyone interested in finding the maximum number of relatives.
That recommendation deserved a warning the video never delivered: a website's privacy setting cannot guarantee that police, other users, or determined investigators will never gain access to information a person intended to protect.
The evidence was already available when Baker published his video. Subsequent events made the problem impossible to dismiss.
1. Police Had Already Overridden GEDmatch's Privacy Choices
In May 2019, GEDmatch introduced an opt-in system for law-enforcement matching. The change followed controversy surrounding police use of genetic genealogy databases to investigate serious crimes.
The distinction mattered. People who uploaded their DNA for family-history research could choose whether their profiles would be included in searches intended to identify violent offenders.
But the arrangement encountered a legal obstacle almost immediately.
In November 2019, The New York Times reported that a Florida detective had obtained a search warrant allowing police to examine GEDmatch's database regardless of individual users' privacy settings.
The database contained approximately one million profiles.
According to the reporting, the court's authorization allowed investigators to search beyond the subset of users who had voluntarily agreed to law-enforcement matching.
The significance was straightforward: GEDmatch could offer users a choice, but that choice did not necessarily bind a court.
A website's terms govern ordinary use of its service. They do not automatically defeat valid legal demands for information.
This was not a theoretical objection raised years after Baker's video. The reported warrant preceded its September 2022 publication by almost three years.
A responsible explanation of the opt-out feature should have distinguished between declining routine police matching and obtaining comprehensive protection against government access.
Baker did not make that distinction.
His assurance was broader than the protection the system could deliver.
2. In 2020, GEDmatch's Privacy Settings Failed
The second warning arrived on July 19, 2020.
GEDmatch experienced a security breach that reset user permissions, making profiles accessible for matching outside their intended privacy restrictions.
According to Verogen, the company operating GEDmatch, the incident lasted approximately three hours.
During that period, profiles belonging to people who had not authorized law-enforcement matching became available for such comparisons.
Police profiles also became visible to ordinary GEDmatch users.
These are not allegations assembled by critics. They come from Verogen's own incident statement.
Verogen said no user data had been downloaded or compromised. Contemporary reporting also stated that the company had not received or responded to law-enforcement requests during the incident.
Those qualifications matter. The evidence establishes unauthorized exposure to matching, not that investigators necessarily searched or downloaded every affected profile.
Nevertheless, the incident demonstrated a serious weakness.
A privacy decision is only as reliable as the systems enforcing it.
A person could have examined GEDmatch's options carefully, declined law-enforcement participation, and still experienced a period when the platform failed to honor that decision.
No mistake by the user was required.
The failure occurred inside the service.
By the time Baker published his recommendation in 2022, GEDmatch had already publicly acknowledged this incident.
Yet viewers were given no meaningful account of what had happened.
That omission matters considerably more than whether a genetic ancestry report costs $14 or $20.
3. The Most Damaging Evidence Emerged in 2023
The most serious challenge to GEDmatch's consent protections came after Baker's video appeared.
In August 2023, journalist Jordan Smith reported for The Intercept that forensic genetic genealogy practitioners had exploited a loophole allowing access to information associated with users who had declined law-enforcement matching.
The reporting examined techniques used by specialists conducting genetic investigations and communications concerning access to otherwise restricted profiles.
The allegations were substantial.
But the decisive development came from GEDmatch's operator.
On November 13, 2023, Verogen published an official statement acknowledging that a small number of forensic genetic genealogy practitioners had circumvented privacy settings.
According to the company, the practitioners accessed information associated with users who had not consented to participation in investigations involving violent crimes.
Verogen further stated that the practitioners had encouraged concealment of the practice, taught others to use it, and altered reports to prevent detection.
The information potentially exposed included names or aliases, email addresses, DNA kit numbers, and genetic relationships to law-enforcement profiles.
Consider the implications.
A person could deliberately refuse participation in police investigations.
Investigators working with genetic genealogy could nevertheless obtain information about that person by exploiting weaknesses in the platform.
And according to GEDmatch's own account, some practitioners took steps to conceal their actions.
This was not simply a software malfunction.
It involved people deliberately working around restrictions intended to protect users.
Verogen said it had fixed the identified loopholes, conducted broader security assessments, introduced additional contractual obligations for forensic practitioners, and notified relevant regulators.
Those are important corrective actions. They are not evidence that the violations never occurred.
Nor does the incident establish that every forensic genealogist behaved improperly.
The company's acknowledgment specifically concerned a small number of practitioners.
That narrower conclusion is sufficiently troubling.
GEDmatch's protections failed in two different ways: technical controls malfunctioned in 2020, and investigators deliberately circumvented controls in incidents acknowledged in 2023.
Baker could not have known about the latter disclosure when recording his video.
But the subsequent investigation demonstrates precisely why treating consent settings as comprehensive privacy protection was an unsound explanation.
4. Your Relatives Can Expose You Without Your Permission
There is a deeper problem with genetic databases that no company can solve simply by adding another checkbox.
DNA is personal information that also reveals something about other people.
A customer uploading a genetic profile is not merely providing information about themselves.
That profile contains evidence of biological relationships with parents, siblings, children, cousins, and more distant relatives.
Those people may never have purchased a DNA test.
They may never have agreed to genetic genealogy searches.
They may not even know their relatives have uploaded genetic information.
Yet they can become discoverable through family connections.
This problem was examined in a major study published in Science in October 2018.
Researchers Yaniv Erlich, Tal Shor, Itsik Pe'er, and Shai Carmi analyzed information involving 1.28 million consumer genetic profiles.
They estimated that approximately 60% of long-range familial searches involving people of European ancestry could identify a third cousin or closer relative.
That does not mean investigators can immediately identify 60% of people by name. A genetic match supplies a starting point; identification requires additional genealogical and demographic research.
But the researchers demonstrated how powerful that starting point could be.
Using genetic relationships, family records, age, geographical information, and other clues, investigators can progressively narrow a large family network to a small set of candidates.
The researchers also demonstrated the reidentification of a person from a public genomic research dataset through distant familial matches.
Their work established that genetic identification can extend far beyond individuals who personally submitted data to a genealogy service.
One detail deserves attention.
Two of the researchers, including lead author Yaniv Erlich, were affiliated with MyHeritage.
MyHeritage was also the disclosed sponsor of Baker's 2022 video.
That connection does not establish editorial interference, nor does it prove that Baker knew about the study.
It does establish that the privacy implications of family-based genetic matching were not an obscure concern unavailable to the consumer genealogy industry.
The scientific work was already public four years before the video appeared.
And its central lesson was difficult to misunderstand.
Your genetic privacy partly depends on decisions made by relatives you may never have met.
5. GEDmatch's Own Policy Contains More Exceptions Than Viewers Were Told
GEDmatch continues to offer different privacy settings.
Its current public explanation distinguishes between participation in violent-crime investigations, ordinary genealogical matching, searches connected with unidentified human remains, and options limiting matching visibility.
Those distinctions are important.
Under GEDmatch's published settings, a user who selects Public Opt-out is excluded from ordinary law-enforcement comparisons intended to identify perpetrators of violent crimes.
However, that option still permits comparisons involving the identification of human remains, including searches involving law-enforcement users.
Separate Personal Research and Private settings provide more restrictive matching arrangements.
An opt-out from violent-crime searches is therefore not equivalent to refusing every possible government-related genetic comparison.
The company's privacy policy, effective October 21, 2025, adds another important qualification.
GEDmatch states that it may disclose genetic, personal, or genealogical information when necessary to comply with legal obligations, including subpoenas or warrants.
It says it will attempt to notify affected users unless legally prohibited.
The policy also explains that uploaded DNA files are converted into a compressed binary format and that the original files are deleted after processing.
Crucially, the company acknowledges that this converted DNA information is not encrypted in the ordinary sense, although it describes the information as difficult for humans to read.
These are distinct questions that deserve distinct answers.
Can GEDmatch restrict ordinary police searches? Yes.
Does that restriction eliminate every possible route to government access? No.
Can users remove their genetic information? GEDmatch provides deletion procedures, subject to its stated processing and backup-retention arrangements.
Does an alias prevent genetic relatives from being identified through other information? Not necessarily.
The video compresses this complicated arrangement into a reassuring statement about maintaining privacy.
That is the fundamental editorial failure.
6. Solving Murders Does Not Make Consent Irrelevant
Baker offers another reassurance when discussing police investigations.
He explains that people will not be mistaken for criminals merely because their DNA resembles that of an offending relative.
There is a legitimate scientific point here.
A familial genetic match is not the same as a direct identification of the person who left biological evidence at a crime scene.
Investigators use family relationships to develop leads. They must then conduct additional investigation, and a direct DNA comparison may establish whether a particular person matches the evidence.
Baker is also right that forensic genetic genealogy can help solve extraordinarily serious crimes.
Consider Joseph James DeAngelo, the Golden State Killer.
Investigative genetic genealogy helped authorities identify DeAngelo in 2018.
In August 2020, he was sentenced after pleading guilty to 13 murders and 13 kidnappings.
California prosecutors documented his involvement in a campaign of violence that affected dozens of victims over many years.
That is an exceptionally powerful argument for allowing appropriately regulated genetic investigations.
It is not an argument for pretending privacy costs do not exist.
A relative may be correctly excluded as the perpetrator while still having their identity, ancestry, and family relationships examined during an investigation.
Being innocent does not mean the investigation had no privacy consequences.
Nor must someone oppose the prosecution of murderers to insist that genetic databases honor their users' consent.
Even the United States Department of Justice recognized this tension.
Its September 2019 policy announcement described forensic genetic genealogy as a valuable investigative technique while acknowledging the need to protect privacy and civil liberties.
The relevant question is not whether investigators should ever use genetic genealogy.
It is whether people understand what access they are granting, what protections actually exist, and how those protections can fail.
A viewer deciding whether to upload their DNA deserves that information.
7. A Sponsored Tutorial Needed a More Serious Warning
Baker discloses that MyHeritage sponsored the video and explains that he specifically requested the sponsorship.
That disclosure is appropriate.
The episode subsequently encourages viewers to purchase a MyHeritage DNA testing kit, download their genetic information, and explore additional services.
There is no evidence in the material examined that MyHeritage instructed Baker to minimize privacy risks or interfered with his editorial judgments.
Such an accusation would be unjustified.
The problem lies in the presentation itself.
The video carefully describes the cost of premium genetic reports, the speed of uploads, the number of available traits, and the convenience of different services.
It even provides useful warnings about interpreting genetic disease risks.
But it gives comparatively little attention to the implications of distributing personal genetic information across multiple commercial platforms.
Each additional upload creates another organization responsible for handling sensitive information.
Its policies, security systems, business arrangements, and legal obligations become relevant to the user's privacy.
The fact that a genetic test has already been completed does not make transferring its results to another company risk-free.
A convenient upload is still a disclosure of genetic information.
An educational video can be accurate about the mechanics of a product while remaining dangerously incomplete about the decision to use it.
That distinction matters here.
The Verdict: GEDmatch Offered a Choice, Not a Guarantee
Matt Baker's episode is not worthless.
It explains several genuinely useful genetic services, and its demonstrations make an unfamiliar subject accessible.
But its treatment of GEDmatch privacy is inadequate.
A court-approved search reportedly bypassed users' preferences in 2019.
A security breach made protected profiles available for matching in 2020.
In 2023, GEDmatch's operator acknowledged that forensic practitioners had deliberately circumvented consent settings and concealed their actions.
Scientific research had already demonstrated that family-based genetic identification could affect people who had never personally submitted DNA.
These were not all foreseeable developments in September 2022. The 2023 misconduct acknowledgment came later.
But the underlying problem was already established.
Genetic privacy is not a setting controlled entirely by the individual who uploads a file.
It depends on relatives, investigators, courts, corporate policies, and security systems.
Those forces do not always respect the boundaries a user believes they have established.
GEDmatch's matching controls provide meaningful choices, and the company has taken steps to address documented weaknesses. Neither fact supports treating those controls as a guarantee.
The most troubling part of the UsefulCharts episode is not its enthusiasm for genetic genealogy.
It is the ease with which a serious question of personal autonomy becomes an uncomplicated product recommendation.
DNA can help identify murderers, reunite families, and illuminate human history.
It can also expose family relationships that people never intended to disclose.
Baker explained what viewers might discover by uploading their DNA. He failed to explain adequately what other people might discover about them.
That is the information his audience needed before clicking Upload.
References
1. Original work
I Uploaded My DNA to Genomelink, My True Ancestry, GEDmatch, Promethease, and Genetic Lifehacks. UsefulCharts, Matt Baker, September 2, 2022.
The original episode establishes Baker's recommendations, sponsorship disclosure, and assurances about GEDmatch privacy.
2. GEDmatch security breach
GEDmatch Incident Response. Verogen, July 2020.
Read Verogen's official statement
The company confirms that a security breach temporarily made profiles available for comparisons beyond their intended privacy settings, while stating that no data was downloaded or compromised.
3. Unauthorized access to opted-out profiles
Notice Regarding Investigations Into FIGG Practitioners Circumventing GEDmatch Settings and Violating Terms of Service, and Actions Taken. Verogen, updated November 13, 2023.
Read the official acknowledgment
Verogen confirms deliberate circumvention of privacy settings, the types of information potentially accessed, and corrective measures introduced afterward.
4. Investigation of forensic genealogy practices
Police Are Getting DNA Data From People Who Think They Opted Out. Jordan Smith, The Intercept, August 18, 2023.
The investigation documents allegations that forensic practitioners exploited GEDmatch tools to obtain information from profiles excluded from routine law-enforcement matching; Verogen subsequently acknowledged violations.
5. Judicial access to genetic databases
Your DNA Profile Is Private? A Florida Judge Just Said Otherwise. Kashmir Hill and Heather Murphy, The New York Times, November 5, 2019.
The reporting describes a Florida warrant authorizing a broader GEDmatch search than ordinary user consent settings permitted; the account relies on reporting of the warrant rather than an independently examined court order.
6. Scientific research on familial identification
Identity Inference of Genomic Data Using Long-Range Familial Searches. Yaniv Erlich, Tal Shor, Itsik Pe'er, and Shai Carmi. Science, October 11, 2018.
The researchers demonstrate the identification potential of distant genetic relatives and estimate matching probabilities using 1.28 million consumer genetic profiles; their population projections depend on stated modeling assumptions.
7. Current GEDmatch matching options
Privacy and Security. GEDmatch.
Read GEDmatch's published matching controls
The platform distinguishes violent-crime matching, unidentified-remains investigations, personal research, and private profiles.
8. Current GEDmatch privacy policy
Privacy Policy. GEDmatch, effective October 21, 2025.
The policy documents the company's procedures for handling genetic information, responding to legal demands, processing uploaded files, and managing privacy rights.
9. Demonstrated law-enforcement benefits
Joseph James DeAngelo Jr. Sentenced to 11 Consecutive Life Terms Without the Possibility of Parole for 13 Murders. Orange County District Attorney, August 21, 2020.
Read the prosecution's official account
The prosecution confirms DeAngelo's identification through investigative genetic genealogy and the criminal convictions resulting from the investigation.
10. Federal guidance on forensic genetic genealogy
Department of Justice Announces Interim Policy on Emerging Method to Generate Leads for Unsolved Violent Crimes. United States Department of Justice, September 24, 2019.
Read the Justice Department announcement
The announcement explains forensic genetic genealogy's investigative purpose and the federal department's stated effort to balance criminal investigations with privacy and civil liberties.