agree, red flag.
it's easy to secure it by having the company NOT hold any valuable data:
Use the data (face) on the phone to generate a reproducible random hash, use that as a seed to generate private key.
No need to store anything on a server ever.
twetch#3667 6.5y