The "opt-in" model ensures that customers are aware of the risks and limitations of this potentially sensitive data, but some are questioning whether the direct-to-consumer model is the appropriate mechanism for delivering information on APOE status, even with additional precautions.