[JonathonW]

> After all we wouldn't talk about Dropbox being sold resulting in ransacking of your personal data why is that in the conversation with 23andme?

Both 23andme and Dropbox's privacy policies only require them to notify users if the privacy policy changes (no restriction on scope of those changes), so maybe we should (if Dropbox were to be sold)?

[Guvante]

Not legally, they can only do that if you implicitly agree by continuing to use the product.

If you don't interact in a meaningful way you cannot change a contract from one side you need a new agreement.

Now whether this is enforced is a different manner.