Although 23andMe has pledged to protect user data as it prepares for a potential sale, several state attorneys general have recommended that users remove their information.