Sure the customers decided, but what about their relatives? If any of my relatives uploaded their genetic info to this, it by extension has a huge part of my genetic info too, and my consent was decided without my knowlegde...

What I'm trying to say is: I don't think comparing it to equifax is reasonable in that regard.