23 and me isn't a healthcare provider and not a "covered entity" under HIPAA . So the protections that would apply if you got genetic testing through your doctor from an actual medical genetic testing company don't actually apply to 23 and me. Though the company maintains it follows federal regulations voluntarily "as a courtesy."
So don't worry, your genetic data is protected by the good will of venture capital tech bros.
It's even worse when you consider there's no dedicated video memory, so this is shared between graphics and the rest of the system.