23andMe can do whatever they want with your data. It totally boggles my mind that someone would give a private company legal, full, and complete access to what makes you, you. We're still in the infancy of understanding what we can do with our genomes. Giving all our information over to an entity without a fiduciary responsibility to protecting your personal data is just idiotic.
This isn't correct. 23andMe are quite expliict about how genomic data may be used in their [privacy policy](https://www.23andme.com/about/privacy/#jump-link-content-con...).
Research using your genetic data only occurs with your permission, and it's stripped of personally identifying information (i.e presented in aggregate) when delivered to third parties. 23andMe can't, for example, sell your genome to an insurance company.
23andMe don't have a fiduciary responsibility to protect your data, they have legal one. If you still find this overly concerning, you could just use 23andMe's genetic sequencing, which when I last checked was priced at below cost, download the data and tell 23andMe to delete all personal information.
Once you have the genetic data, there are many options for performing analytics. For example https://www.promethease.com/ which uses SNPedia and isn't under the same FDA scrutiny as 23andMe and doesn't have to self-censor.