I struggle to think of an actual scenario where selling this data would translate to specific harms. The data 23&Me collects isn't really genomics, it's a microarray with a very limited relationship to actual health outcomes.