Terms: https://www.23andme.com/about/tos/
Privacy: https://www.23andme.com/about/privacy/
1. Can you control who has access to your data?
23andMe can “disclose to third parties […] Aggregated Genetic and Self-Reported Information”, but won’t “release your individual-level Genetic and/or Self-Reported Information to a third party without asking for and receiving your explicit consent to do so”.
2. Can you export your data?
You can download the raw data, or access the data through an API. 
3. Can you close your account?
“At your written request we will close your account. As a result, all Genetic Information will be removed from the account and will no longer be accessible. 23andMe will not use your Genetic Information in new research that starts thirty (30) days or more after account closure.”
4. Can the terms change without prior notice?
“23andMe may make changes to the TOS from time to time […] You acknowledge and agree that if you use the Services after the date on which the TOS have changed, 23andMe will treat your use as acceptance of the updated TOS.” 
5. Can I trust them to keep my data secure?
23andMe enforces using a secure connection (HTTPS).