Broker profile

Ancestry

One of the largest subscription genealogy and DNA testing services, founded in 1996 and operated by Ancestry.com Operations Inc. out of Draper, Utah. Unlike the free people-search brokers in this directory, the data sits inside paid accounts rather than public profiles, and it covers DNA samples, family-tree records, and historical-record links. Acquired by Blackstone funds in Dec 2020 for $4.7 billion; Singapore's GIC kept a significant minority stake. Self-claimed scale: 3+ million paying subscribers and 27+ million DNA samples processed. Courts have dismissed the Illinois GIPA class action over the Blackstone buyout and the yearbook-photo right-of-publicity suits in California and Nevada, though new filings on both theories continue.

Opt out of Ancestry Visit ancestry.com

Ancestry overview

At a glance

Quick facts

Redact's exposure rating

Substantial

LimitedModerateSubstantialExtensive

Data published: Editorial estimate
Re-listing frequency: Editorial estimate
Complaint record: Pattern of complaints
Opt-out friction: Editorial estimate
Operator opacity: Fully disclosed
Prior data incidents: Confirmed breach

Our editorial assessment from public sources as of May 22, 2026. Each dimension is scored 1 to 4, higher means more exposure, and the overall gauge is their average, unless a confirmed breach holds it higher. It is an opinion, not a finding about the company's conduct or legal compliance. Dimensions marked "Editorial estimate" are estimated from the kind of service offered rather than observed on this site. How we score

A confirmed prior data leak holds the overall rating at Substantial or higher; a major or repeat breach forces Extensive, regardless of the other five dimensions.

What each dimension means

Data published: how much and how sensitive the personal data they put out.
Re-listing frequency: how quickly you reappear after opting out.
Complaint record: the volume and pattern of complaints across BBB, Trustpilot, and Sitejabber. No listing, or a listing with no reviews, counts against the broker.
Opt-out friction: how hard the removal process is to complete.
Operator opacity: how hidden the operating company and its principals are.
Prior data incidents: history of breaches or leaks of the data they hold.

Category: Genealogy + DNA testing
Operating entity: Ancestry.com Operations Inc. / Ancestry.com Operations, L.P.
Founded: 1996
President & CEO: Howard Hochhauser
Headquarters: 42 Future Way, Suite 400, Draper, UT 84020
Parent: Acquired by Blackstone funds Dec 2020; GIC kept a significant minority stake
Subscribers (self-claimed): 3+ million paying
DNA samples processed: 27+ million
FCRA covered?: Doesn't present itself as a CRA

Background

Company history

Ancestry started in 1996 as Ancestry Publishing in Utah, building digital archives of historical genealogical records (US Census, Social Security Death Index, ship-passenger lists, military records, newspaper archives). Over the next two decades it became the dominant US genealogy platform and then expanded into consumer DNA testing with AncestryDNA in 2012. Today the company runs a paid subscription service (Ancestry.com), the AncestryDNA test product, and a family-tree-building toolkit, with "Related Brands" in its privacy statement including Newspapers.com, Fold3 (military records) and Find a Grave. The largely-retired RootsWeb isn't on that list, but its homepage says it "is funded and supported by Ancestry.com".

Founded: 1996
AncestryDNA launched: 2012
First take-private: 2012 ($1.6B)
Silver Lake / GIC stake: 2016 ($2.6B)
Blackstone acquisition: Dec 2020 ($4.7B)
Operating entity: Ancestry.com Operations Inc. / Ancestry.com Operations, L.P.

The corporate ownership history reads like a private-equity relay. Permira and Spectrum Equity took Ancestry private in 2012 for $1.6 billion; Silver Lake Partners and Singapore's GIC sovereign wealth fund bought minority stakes at a $2.6 billion valuation in 2016; and in December 2020 private-equity funds managed by Blackstone acquired the company for $4.7 billion, with GIC retaining a significant minority stake.

The Blackstone acquisition raised privacy alarms specific to the DNA-test product line. What happens to the accumulated 27+ million genetic samples when the operating company changes ownership? Plaintiffs in Bridges v. Blackstone argued Blackstone's December 2020 acquisition itself constituted a non-consensual "disclosure" of genetic information under the Illinois Genetic Information Privacy Act (GIPA). The Seventh Circuit affirmed dismissal of that case in May 2023, calling the complaint "bare bones," but the ruling explicitly didn't foreclose better-pled GIPA cases, and per Kirkland & Ellis, new GIPA filings have flooded Illinois courts in the wake of the Bridges decision.

Ancestry isn't really a "data broker" in the people-search sense. The other brokers in this directory publish public-facing profiles you can find by searching a name; Ancestry is a paid subscription service where the data sits inside your account and isn't broadly indexed by search engines. The privacy concerns are still real (genetic-information retention, family-tree links across generations, possible law-enforcement requests for genetic data), but they're a different shape than the public publication concern with the free people-search brokers. Treat this profile as documenting a different category of consumer-privacy risk.

Data Published

Data types

In-account, not publicly indexed

DNA samples (saliva tubes) and the genetic sequencing results derived from them
Ethnicity estimates and migration-pattern inferences derived from DNA
DNA-matching network: which other AncestryDNA users you share genetic markers with, and the strength of that match
Family-tree data you build inside the product (names, dates, places, relationships, photos, source citations)
Historical record links you save (census, military, immigration, vital-statistics, newspaper archives, yearbook photos)
Account profile data (name, email, address, payment info, account preferences)
Usage data (what records you view, what searches you run, how long you spend in different product areas)
Communications with other users (private messages on the platform)

Where the data lives: Ancestry's primary data is held inside your paid account. It's not publicly searchable on the open web the way a Whitepages or FastPeopleSearch profile is. Other AncestryDNA users may see you as a DNA match (if you opt in to matching) with the name you set on your profile. The historical-record attribution feature (which displays yearbook photos and old census records by name) is the main exception. That surface drove the wave of Callahan / Sessa-style right-of-publicity class actions.

Deleting DNA results alone keeps the saliva sample. Ancestry's privacy statement says the physical sample is destroyed when you delete your whole account or when you ask Member Services to destroy it; deleting just the digital DNA results in DNA settings leaves the sample in the lab. See the removal guide for which track covers what.

Contact

Contacts & links

Ancestry.com Operations Inc.

Operating entity: Ancestry.com Operations Inc. / Ancestry.com Operations, L.P.
Headquarters: 42 Future Way, Suite 400 Draper, UT 84020 · per Ancestry's official corporate contact page; legacy listings still show 1300 W Traverse Pkwy, Lehi, UT 84043
Customer support: Routed through Ancestry's Contact Us page (chat + phone callback for paying subscribers)
Account delete page: ancestry.com/secure/account/delete
DNA settings (delete results / revoke consent): ancestry.com/dna/settings
Privacy statement: ancestry.com/c/legal/privacystatement
State privacy rights: Privacy statement, California and state-law section · Do Not Sell or Share page
Parent companies: Blackstone funds (acquired Ancestry Dec 2020) · GIC (Singapore sovereign wealth fund, significant minority stake)

Network

Related sites

Related brands + investors

Ancestry's privacy statement lists several related genealogy / historical-record sites as its "Related Brands" and covers them alongside Ancestry. An All Access membership bundles Fold3 and Newspapers.com with Ancestry, but each site can also hold a separate account of its own.

Parent stack:

One sibling in this directory

Archives.com is one of the "Related Brands" Ancestry's privacy statement covers, but it keeps its own accounts and its own living-person opt-out form. An Ancestry deletion doesn't reach it, so file there separately.

The parent-stack note matters for privacy purposes because ownership changes at the corporate level have historically been the trigger for genetic-data-privacy concerns (see Bridges v. Blackstone in the litigation section below).

Owned or operated by Ancestry (Ancestry.com Operations Inc.)4 entities in this network · Blackstone + GIC (Private equity + GIC) at the topExplore the full map

Reputation

Trust signals

Mixed across platforms

As a paid subscription product, Ancestry collects much richer third-party review data than the free people-search brokers in this directory. Reviews skew strongly bimodal. Genealogy enthusiasts and DNA-test customers rate the product high, while a smaller but vocal segment reports billing disputes, sample-handling concerns, and frustration with the depth of opt-out / deletion options. The litigation patterns documented in the litigation section below give the clearest signal on the systemic privacy concerns.

Trustpilotancestry.com3.1 / 5As of 2026-05View reviews ↗

Better Business BureauAncestry.com (Draper, UT) · accredited since 2010A+As of 2026-10View profile ↗

SmartCustomer (formerly Sitejabber)ancestry.com1.6 / 5As of 2026-05View reviews ↗

What reviewers and complainants say, from the sources above. Redact hasn't verified these complaints.

Difficulty cancelling subscriptions; auto-renewal billing disputes
Concern over physical DNA sample retention even after account deletion
Yearbook photos surfacing without subject consent (the basis of the Callahan / Sessa cases)
Family-tree links to relatives who never consented to be in the database
Concern about possible law-enforcement requests for genetic data (Ancestry's transparency report records no valid requests for customers' DNA data in the second half of 2024, and Ancestry insists on at least a court order or search warrant; its 2015 report says it disclosed information in response to one 2014 warrant)

Common complaint themes (across platforms):

Litigation

Litigation history

GIPA and yearbook suits · 2017 RootsWeb leak

Bridges v. Blackstone Inc. (GIPA)

Parent-company litigation

Court: U.S. Court of Appeals, 7th Cir.
Case no.: 22-2486
Filed: Jul 2021
Decision: May 2023 dismissal affirmed
Statute: Illinois Genetic Information Privacy Act (GIPA) §30
Author: Judge Michael Scudder Jr.
Notable language: "Bare bones" complaint

Putative class action arguing that Blackstone's December 2020 acquisition of Ancestry constituted a compulsory disclosure of plaintiffs' genetic information in violation of GIPA §30. The Seventh Circuit affirmed the district court's dismissal, holding that "a run-of-the-mill corporate acquisition, without more alleged about that transaction, does not result in a compulsory disclosure of genetic information." The ruling didn't foreclose better-pled GIPA cases. New filings have flooded Illinois courts since.

Sources: Fenwick analysis · PrivacyWorld analysis

Callahan v. Ancestry.com Inc. (yearbook photos · CA)

Dismissed

Court: N.D. Cal.
Case no.: 3:20-cv-08437
Filed: Nov 30, 2020
Plaintiffs: 2 named plaintiffs
Statute: California right of publicity
9th Cir. appeal: 21-16161

Putative class alleging Ancestry violated California's right-of-publicity statute by including yearbook photos in its public database and in promotional emails. The district court dismissed on Communications Decency Act §230 grounds (Ancestry as a republisher of third-party content); the Ninth Circuit affirmed.

Sources: CourtListener docket · Eric Goldman blog analysis

Sessa v. Ancestry.com Operations Inc. (yearbook photos · NV)

Dismissed

Court: D. Nev.
Case no.: 2:20-cv-02292
Statute: Nevada right of publicity
Sept 2021: Motion to dismiss granted in part, denied in part
Jan 17, 2024: Dismissed without prejudice, no personal jurisdiction

Companion case to Callahan, in Nevada. Plaintiffs alleged Ancestry used their names, images, and likenesses (from yearbook photos) to market paid subscriptions. In September 2021 the court let the Nevada right-of-publicity claims proceed, holding that the alleged misuse was a concrete injury under Article III, which kept yearbook-photo litigation alive after the Callahan §230 dismissal. On reconsideration in January 2024, after the Ninth Circuit's Briskin v. Shopify decision, Judge Navarro dismissed the case without prejudice for lack of personal jurisdiction, finding that a nationwide website's data practices weren't aimed at Nevada in particular.

Sources: 2021 FindLaw opinion · 2024 FindLaw opinion · Eric Goldman blog analysis

2017 RootsWeb credential exposure

Confirmed incident

RootsWeb, "funded and supported by Ancestry.com" per its homepage · disclosed Dec 2017

Scope: About 300,000 RootsWeb usernames, emails and plaintext passwords
Overlap with Ancestry accounts: About 55,000, per Ancestry, which locked and notified them
Who was exposed: RootsWeb and Ancestry account holders, not people in records

A file of roughly 300,000 RootsWeb email addresses, usernames and passwords, stored in plain text, sat exposed on a RootsWeb server until Troy Hunt of HaveIBeenPwned reported it to Ancestry on December 20, 2017. Ancestry's security chief said about 55,000 of the pairs matched credentials also used on an Ancestry site, mostly free-trial or dormant accounts; the company locked those accounts, notified their owners and took parts of RootsWeb offline while it rebuilt the service. No payment or DNA data was involved.

Sources: Threatpost · The Legal Genealogist, quoting Ancestry's statement

Active litigation patterns to watch:

Yearbook-photo right-of-publicity wave. New state-specific filings continue beyond Callahan and Sessa. The Section 230 defense varies by jurisdiction and by how plaintiffs characterize Ancestry's use.
Illinois GIPA wave. Per Kirkland & Ellis Oct 2023 analysis, new GIPA filings continued in Illinois courts after the Bridges dismissal. The ones that allege specific transactional or operational disclosure (rather than mere stock-purchase ownership change) have better odds of surviving dismissal.
Minors-arbitration dispute. Ancestry has sought orders compelling minor plaintiffs to arbitrate GIPA claims, with mixed success across courts. The enforceability of arbitration clauses against minors is the underlying question.

FAQ

Q & A

Common questions

Is Ancestry a data broker?

Not in the people-search sense, but Ancestry handles sensitive consumer data at scale. It's a paid subscription genealogy and DNA testing service, not a free public people-search site. The privacy concern is the DNA samples, family-tree data, and historical-record links held inside paid accounts (with yearbook photos being the main publicly-indexed surface), plus possible law-enforcement requests for genetic data, which Ancestry says require a warrant or court order.

Who owns Ancestry?

Ancestry is operated by Ancestry.com Operations Inc. and Ancestry.com Operations, L.P. Private-equity funds managed by Blackstone acquired Ancestry in December 2020 for $4.7 billion; Singapore sovereign wealth fund GIC kept a significant minority stake. Founded in 1996 and now headquartered at 42 Future Way, Suite 400, Draper, UT 84020. Howard Hochhauser became President and CEO effective February 1, 2025, succeeding Deb Liu, who joined Ancestry in March 2021, per Ancestry's announcement.

What information does Ancestry publish?

Ancestry stores DNA samples (saliva tubes) and the sequencing results, ethnicity estimates and migration inferences, DNA-matching networks, family-tree data (names, dates, places, relationships, photos), historical record links (census, military, immigration, vital statistics, newspaper archives, yearbook photos), account profile data, usage data, and private user-to-user messages. The data lives inside paid accounts, not on the open web.

Can I remove myself from Ancestry?

Yes, via three separate tracks. Account deletion is at ancestry.com/secure/account/delete (requires sign-in; 30-day completion). DNA results deletion and consent revocation is a separate flow at ancestry.com/dna/settings. Deleting the whole account also destroys the physical DNA sample, per Ancestry's privacy statement; if you delete only the DNA results and keep the account, the sample stays unless you ask Member Services to destroy it. See our Ancestry removal guide for step-by-step instructions.

How long does Ancestry take to remove information?

Account deletion completes within 30 days per Ancestry's own delete-page disclosure. DNA results deletion runs on the same clock: the privacy statement says all genetic information leaves Ancestry's production, development, analytics and research systems within 30 days. The physical sample goes with the account deletion; if you keep the account and ask Member Services to destroy it instead, Ancestry publishes no timeline for that.

Is Ancestry covered by FCRA?

Ancestry isn't sold as a background-check or consumer-report service. The relevant litigation has been Illinois Genetic Information Privacy Act (GIPA) cases like Bridges v. Blackstone (dismissed by the Seventh Circuit in May 2023) and California / Nevada right-of-publicity suits over yearbook photos (Callahan, Sessa). New GIPA filings continued in Illinois after Bridges.

Take yourself off data broker sites

Redact scans data broker sites from your device. The free scan shows which of your details are exposed but hides which broker lists you; Premium and Ultimate show where each listing is. They also submit removals for most brokers Redact covers and hand you the opt-out link for the rest, then re-scan on a schedule and file again if you reappear. Coverage varies by broker.

Scan for Free

Last updated May 22, 2026.

The page provides general information, not legal advice. Redact is not affiliated with or endorsed by Ancestry or any other company named here. Spotted an error, or represent this company? Email support@redact.dev.