> Most people assume there is no way a legit company would do something terribly evil.
Are you kidding? Cynicism is endemic in the U.S. today; likewise for anti-corporatism. You can see it in the comments.
Personally, I'm in the same boat as the OP: I was a very early 23&Me customer and persuaded many family members to also participate, with the knowledge that 23&Me would monetize the data through research. They never claimed to be a non-profit. They were relatively transparent about their opt-in and opt-out policies, though after the FDA debacle their "simplified" website became significantly more complex and opaque. I also participated in a Kaiser Permanente whole genome sequencing research program, donated my blood samples, and then never heard anything ever again. I hope they're doing good science, especially because donating my whole genome is significantly more invasive from a privacy perspective than a few thousand SNPs.
If we sat around and waited for the perfect environment that addressed everybody's concerns, we'll be waiting forever. In the meantime, the less selfish among us are putting our own privacy at risk for the greater good. And the more of us that do that, the more political pressure there will be to sustain and expand existing legal protections prohibiting discrimination.
Not only am I glad 23&Me is selling the data (and this isn't the first time), I hope that overtime they'll have enough income that they can start sharing much of their data for free with schools and labs around the world. The latter may never come to pass, but I can't let perfection be the enemy of the good. And I won't let fear and uncertainty turn me into a perpetual privacy victim.
EDIT: I just received an e-mail from KP regarding their research project. It's the first I've noticed, but judging by my e-mail log they seem to have sent a handful over the past several years which I apparently deleted as spam. Here's the project website: https://researchbank.kaiserpermanente.org/