Ethics and confidentiality.

The rules I hold myself to, and how what you tell me stays between us.

In short. Skeleton Files is a one-person genealogy research business, and I'm that person: James Duncan, in Spring, Texas. I am not a member of the Association of Professional Genealogists, and I am not certified by the Board for Certification of Genealogists. I hold myself to their published codes of ethics anyway, to the Genealogical Proof Standard for evidence, and to the Genetic Genealogy Standards for DNA. What you tell me stays private and is used only for your case. I never publish living people, and I never describe your case in public without your written permission. DNA is used only with your consent and deleted when you ask. If I find something sensitive, you hear it first, privately, and you decide who else does. If a mistake turns up after delivery, I fix it and tell you. If something goes wrong, email hello@skeletonfiles.com and you'll get a written answer within 30 days.

The codes I follow

It matters which rules a researcher works by, and that you can read those rules yourself. So here is where I stand.

I am not a member of the Association of Professional Genealogists (APG). I am not certified by the Board for Certification of Genealogists (BCG). I don't claim their credentials. What I do is follow their published codes, which anyone can read:

  • The APG Code of Ethics and Professional Practices. Among other things, it asks genealogists to safeguard information about living people, to keep data, research and client communications confidential, to get informed consent before using or publicly sharing information, and to disclose conflicts of interest.
  • The BCG Genealogist's Code of Ethics. Among other things, it says to publish personal, genealogical or genetic information someone shared only with their informed consent or with identifying details removed, to treat information about living people with sensitivity, and never to publish as fact anything false, doubtful or unproved.
  • The Genealogical Proof Standard, the field's test for when a conclusion counts as proved. It's explained in plain words below.
  • The Genetic Genealogy Standards (2015), written by a committee of genealogists, genetic genealogists and scientists, for anything involving DNA.

What you tell me stays private

Your notes, your uploads, our emails and the research itself are used only for your case. I don't sell any of it, and I don't share it with anyone for advertising. The companies that help run the business, such as Stripe for payments and Cloudflare for this site and your uploads, are named in the privacy policy, with what each one does.

Your uploads are stored encrypted, then moved into your private case file on an encrypted computer and removed from cloud storage.

I never list or describe a client's case in public, in a video, on this site or anywhere else, without that client's written permission. Even with permission, nothing I publish identifies a living person. The case files on this site are historical investigations with no living clients.

Your file, your family website and your binder are yours. Who sees them is your choice.

Living people

Every family tree reaches the present, so every case touches living people: your parents, your cousins, the matches on your DNA list. They didn't hire me. I treat what I learn about them with discretion.

  • I never publish living people.
  • What you tell me about living relatives is used only for your case.
  • When you share it, you confirm that you have the right to share it with me.

DNA

DNA is the most sensitive thing you can hand me. I follow the Genetic Genealogy Standards, and my rules are short:

  • Consent first. Nobody is tested without their own consent.
  • The results belong to the tester. Testers own their results and raw data. Your test lives in your own Ancestry account.
  • Used only with your explicit consent, and only for your case. I never sell DNA data, never share it, and never use it for anyone else's case. I don't share a tester's results or personal details without that tester's consent. DNA results never go into AI tools, Claude included; I analyze them myself.
  • Living matches stay private. The standards keep living matches' names out of anything published unless the match has agreed or has already made their results public. I go further: I never publish living people at all.
  • Deleted when you ask. Email me and it's gone from your case file. Deleting it from Ancestry is done in your Ancestry account.

Sensitive discoveries

Records and DNA can turn up things nobody expected. A DNA result can show an adoption, or a different biological parent. The records can show a crime or an illness. When that happens:

  • I tell you first, privately.
  • I never tell other relatives.
  • You decide what goes into anything shared with the family, such as the family website or the printed binder.

Evidence, not guesses

I work to the Genealogical Proof Standard. In plain words, a conclusion counts as proved only when:

  • the search was reasonably exhaustive, not just the easy records;
  • every source is cited completely and accurately, so you can find it yourself;
  • the evidence has been analyzed and compared, record against record;
  • any conflict in the evidence has been resolved, not ignored;
  • the conclusion is written out, with its reasoning, and rests on the strongest evidence.

Where the evidence supports only a probable answer, I say so. Every finding is labeled by how sure I am of it, and every search is logged, including the dead ends.

I use AI tools openly, to search, transcribe and cross-reference. They never decide what is true. Every claim in your file is tied to a record, and every AI transcription is checked against the image of the original. The AI assistant I use is Claude, made by Anthropic, PBC. What it sees of your case is handled under Anthropic's privacy policy.

Honesty about results

No researcher can promise that a family appears in the records. Parishes lose books, courthouses burn, and some lines end in a true wall. So depth is a target, not a promise, and I don't sell guaranteed outcomes. The pricing page and the terms of service explain what happens to billing when a line hits a wall.

If an error turns up after your file is delivered, whether I find it or you do, I correct it and tell you.

Archives and sources

The records belong to the archives, courthouses, churches and libraries that keep them. I respect their rules, their access conditions and copyright. Every record in your file is credited to the repository that holds it.

Some archives release records only to family members, and some copies take months to arrive. Those are their rules, and I work within them.

Conflicts of interest

I don't work for two people on opposite sides of the same question, such as competing heirs, without telling both of them and getting both to agree. If I have any other interest that could affect my work for you, I tell you.

If something goes wrong

Tell me. Email hello@skeletonfiles.com and say what happened. You'll get a written answer within 30 days.

You can ask me to delete your data at any time. The privacy policy explains what that covers, the payment records the law makes me keep, and your other rights over your data. Money and disputes are covered by the terms of service and the refund policy.

Skeleton Files · James Duncan
Spring, Texas, USA

Our other legal pages: the terms of service, the privacy policy, the refund policy, and the legal notice.

Last updated: October 7, 2026.