The testing kits may be the "best" - their data retention and security just sucks. I (stupidly) did 23andMe a while back, I've since requested my data to be deleted. Who knows if that's even honored.
I don't care if something like GDPR states they must. I do not trust corps to actually go through the hassle/expense of it.