Face Unlock Data: What Samsung, Google & Apple Do

When you set up face unlock on a Samsung, Google Pixel, or Apple iPhone, the company stores a mathematical map of your face—not an actual photo—and processes it almost entirely on the device itself. None of the three sends your face image to the cloud for the core unlock function, but they differ in how they use the data for other features, how they store it, and what you can control. This article explains exactly what each company does with your face data, based on their public privacy documentation and system designs.

How Face Unlock Works on Each Platform

All three systems use a similar base idea: a sensor captures your face, software extracts unique features (like the distance between your eyes or the shape of your cheekbones), and it creates a mathematical template. This template is compared against a stored version each time you unlock. The key difference is the sensor hardware.

• Apple (Face ID): Uses a TrueDepth camera with an infrared projector and dot projector that maps over 30,000 invisible dots on your face. It captures a depth map and an infrared image, then creates a mathematical representation. Apple states this data is encrypted and stored in the Secure Enclave, a dedicated processor isolated from the main CPU.
• Samsung (face recognition on Galaxy devices): Uses the front camera only, without depth sensing. It captures a 2D image and extracts facial features. Samsung explicitly warns that 2D face recognition is less secure than iris scanning or fingerprint. The template is stored in the device’s secure storage area (Samsung Knox).
• Google (Face Unlock on Pixel): On Pixel 4 and later, Google used a Soli radar chip and infrared camera for 3D mapping. On newer Pixel models (like Pixel 7 and 8), face unlock uses the front camera but with a dedicated machine-learning model. Google stores the template in the Titan M2 security chip.

Where the Data Is Stored

The critical fact is that for the basic unlock function, your face data never leaves your phone. It is stored in a secure, isolated part of the device’s hardware.

• Apple: The Face ID template is encrypted and stored in the Secure Enclave. It is never sent to Apple’s servers or backed up to iCloud. Even if you restore from a backup, you must re-enroll your face.
• Samsung: The face data is stored in the Knox secure platform, which is a hardware-backed security system. It is not backed up to Samsung Cloud or any other server.
• Google: The face model is stored in the Titan M2 chip. It is not backed up to Google servers and is not used for any other Google service.

However, there is a nuance: if you use face unlock for other purposes, such as authorizing payments or logging into apps, the system may send a confirmation token (not your face data) to the app or service. For example, when you use Face ID to pay with Apple Pay, the Secure Enclave sends a signed authentication token to the payment terminal—not your face image.

What Each Company Does With the Data

While the unlock template stays on-device, the companies may use face data for other features, and they have different policies.

• Apple: Face ID data is used only for unlocking, payments, and app authentication. Apple does not use your face data for advertising or analytics. In iOS, you can see which apps have requested Face ID and revoke access. The data is not shared with third parties.
• Samsung: Samsung’s face recognition is used for unlocking, and you can also use it to access a secure folder. Samsung’s privacy policy states that biometric data is not sold or shared for marketing. However, Samsung does collect other data (like usage patterns) that is not tied to your face.
• Google: Google’s face unlock is used for unlocking and for some Pixel-specific features like auto-dimming the screen when you look away (on Pixel 4). Google’s privacy policy says that biometric data is not used for advertising. However, Google does collect your face data if you use the Face Unlock feature in the Google Photos app (which is separate from the system unlock). That feature uses a different on-device model.

Are There Any Cloud or Server Transfers?

For the core unlock function, no. But there are edge cases.

• Apple: Face ID data is never sent to Apple servers. However, if you use the “Look to Wake” feature, the phone uses the front camera to detect if you are looking at the screen, but it does not process or store that data.
• Samsung: Samsung does not send face data to servers for the unlock function. But if you use Bixby or other Samsung services that use the camera, they may process images in the cloud. Those are separate features, not the face unlock template.
• Google: Google does not send face data to servers for the unlock function. However, if you use the “Face Match” feature in Google Photos, it does process your face on-device to group photos, but the resulting face clusters are stored locally. If you have backup enabled, those photos (not the face model) are uploaded to Google Photos, and the face grouping is done in the cloud. That is a different data set.

Security and Privacy Risks

Face unlock is convenient, but it has known limitations.

• Samsung’s 2D face recognition can be fooled by a high-resolution photo of the user. Samsung itself warns that it is less secure than other methods. For this reason, Samsung does not allow face recognition to authorize payments on many devices—you must use a fingerprint or PIN.
• Apple’s Face ID is more secure because it uses depth mapping and infrared. It is designed to resist photos and masks, but identical twins may be able to unlock each other’s phones. Apple’s documentation notes this possibility.
• Google’s face unlock on Pixel 4 was also 3D and secure. On newer Pixels that use 2D camera-based face unlock, Google states it is not as secure as the 3D version and cannot be used for payments. Google requires a PIN or fingerprint for sensitive actions.

Another risk: law enforcement. In some jurisdictions, police may compel you to unlock your phone with your face, but they cannot force you to provide a PIN (in some countries). This is a legal concern, not a technical one.

How to Check and Control Your Face Data

You can see what face data is stored and delete it at any time.

• iPhone: Go to Settings > Face ID & Passcode. You can see which apps use Face ID, disable it for specific apps, or reset Face ID entirely (which deletes the template).
• Samsung: Go to Settings > Biometrics and security > Face recognition. You can remove the registered face, and you can also enable or disable the feature for specific actions like unlocking or accessing Secure Folder.
• Google Pixel: Go to Settings > Security > Face Unlock. You can remove the face data, and you can toggle off the feature. On Pixel devices, you can also set a PIN as a backup.

Frequently Asked Questions

Does face unlock send my photo to the internet?

No. The face template is stored locally on the device in a secure chip. No company sends the actual face image or the mathematical template to the cloud for the unlock function. However, if you use other features like Google Photos face grouping, those photos may be uploaded, but that is separate from the unlock data.

Can someone unlock my phone with a photo of me?

It depends on the phone. Apple’s Face ID and Google’s Pixel 4 face unlock use 3D sensors and are resistant to photos. Samsung’s 2D face recognition and Google’s newer Pixel face unlock (which uses the front camera) can be fooled by a high-resolution photo. That is why those systems are not allowed for payments.

Does face unlock work in the dark?

Yes, on most phones. Apple’s Face ID uses infrared, so it works in the dark. Samsung’s face recognition uses the front camera, which may use the screen as a flash or rely on infrared if the device has it (some Galaxy models have an IR sensor). Google’s Pixel face unlock also uses infrared on models that have it, while others may use the screen light.

Can I use face unlock for banking apps?

Yes, but only on phones that support it securely. Apple’s Face ID is widely supported by banking apps. Samsung and Google only allow face unlock for banking if the device has 3D face recognition (like the Galaxy S21 Ultra or Pixel 4). On 2D systems, banks typically require a fingerprint or PIN.

What happens to my face data if I sell my phone?

You should reset the phone to factory settings before selling. This deletes all biometric data. On iPhone, go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. On Samsung, go to Settings > General Management > Reset > Factory Data Reset. On Pixel, go to Settings > System > Reset Options > Erase All Data.

Is face unlock more secure than a fingerprint?

It depends on the implementation. Apple’s Face ID and 3D face unlock are generally considered as secure as fingerprint sensors. 2D face recognition is less secure. Fingerprints are also unique, but they can be lifted from surfaces. Face unlock has the advantage of not leaving a physical trace, but it can be more easily fooled in 2D form.

Related

• Refurbished Meaning: What It Really Means by Store
• Apt Hidden Powers: 5 Commands You’re Not Using
• Clear Safari History on Mac Without Losing Cookies