yep, right after my kids got the kit for me as a gift, i read an article about ancestry.com-dna-kit and how ancestry violated confidentiality by providing dna to a police department. (the guy terrorized by the breach wasn’t guilty of a thing IIRC, they thought it was his cousin)
I remember reading that they would submit suspect DNA under a false name and see if they got any hits on it as primary or a relative. Very clever. Don’t know about the legality.