I work with genetic data and this sort of stuff is trivially easy to do in an automated way. They could easily run your variants against a known database such as clinvar and broadly deny insurance for a particular pathology if they wanted to.
If they had access to your non-pathogenic variants it also becomes trivially easy to ID you, as non pathogenic variants tend to be random so more likely to ID a person/sample.