Yes, a U.S. Senator sent a letter to Apple in 2017 asking for details about Face ID security, privacy, and data collection. The letter, sent by Senator Al Franken, came shortly after Apple announced Face ID on the iPhone X, and it raised questions about how the system works, what data Apple collects, and how it protects user privacy.
Background: The Senator’s Letter
In September 2017, Senator Al Franken (D-Minnesota) wrote to Apple CEO Tim Cook. The letter followed Apple’s announcement of the iPhone X, which replaced Touch ID with Face ID. Senator Franken’s office had a history of asking tech companies about privacy practices, and Face ID presented new questions because it uses a depth-sensing camera and neural networks to recognize faces.
The letter asked Apple to explain:
- Whether Face ID data is stored on the device or uploaded to Apple servers.
- How Apple handles false positives and false negatives.
- Whether third-party apps can access Face ID data.
- What happens if someone else looks like the phone owner (e.g., twins).
- How Apple will respond to law enforcement requests for Face ID data.
Apple responded in November 2017 with a detailed letter from Kyle Andeer, Apple’s VP of Corporate Law. Apple confirmed that Face ID data is stored in the Secure Enclave, a dedicated security chip on the iPhone, and is not uploaded to the cloud. The response also explained that Face ID uses a mathematical representation of the face, not a photo, and that the data is encrypted and protected.
How Face ID Works
Face ID uses a system called TrueDepth camera, which projects over 30,000 invisible infrared dots onto your face to create a depth map. It also captures an infrared image. The A11 Bionic chip (and later chips) processes this data using a neural network to create a mathematical model of your face.
This model is stored in the Secure Enclave, a separate processor that handles encryption and authentication. The model never leaves the device. When you look at the phone, the TrueDepth camera captures a new depth map and compares it to the stored model. If the match is close enough, the phone unlocks.
Face ID adapts to changes in your appearance over time, like growing a beard or wearing glasses. It also requires your eyes to be open and looking at the phone, which prevents someone from unlocking your phone while you sleep.
Security and Privacy
Apple has stated that Face ID has a false match rate of 1 in 1,000,000, compared to 1 in 50,000 for Touch ID. This means it is much harder for someone else to unlock your phone with their face. However, the system can be fooled by identical twins, and Apple warns about this in its documentation.
Face ID data is encrypted and stored only on the device. It is not backed up to iCloud or any other server. The Secure Enclave is isolated from the main processor, and even Apple cannot access it. This means that Apple cannot hand over Face ID data to law enforcement, even if ordered to do so.
However, Face ID is not a substitute for a strong passcode. In fact, Apple encourages users to have a passcode because Face ID can be disabled by pressing the side button five times, which forces the passcode. Also, if the phone has not been unlocked in 48 hours, or if you have not used Face ID in 6.5 days, you must enter your passcode.
Common Concerns and Misconceptions
One common misconception is that Face ID stores a photo of your face. It does not. It stores a mathematical representation, which is not a picture and cannot be reversed into an image. Another misconception is that Face ID works in the dark. It does, because it uses infrared, not visible light.
Another concern is whether Face ID can be tricked by a photo or a mask. Apple says that Face ID uses depth information and is resistant to photos, but a high-quality mask could potentially fool it. In practice, this is extremely difficult and expensive to do.
Some users worry about privacy if they are arrested. In the United States, courts have ruled that law enforcement cannot force you to provide your passcode, but they can force you to unlock your phone with Face ID or Touch ID, because those are considered biometric, not testimonial. This is a legal gray area, but it is important to know.
Comparison with Other Biometric Systems
Face ID is not the only facial recognition system. Android phones have used facial recognition for years, but many of them are less secure because they rely on the front camera and do not use depth sensing. Some Android phones now use similar 3D scanning, but Face ID is often considered the gold standard because of the Secure Enclave and the neural network processing.
Compared to fingerprint sensors, Face ID is generally faster and more convenient, especially when wearing gloves or when your hands are wet. However, some users prefer Touch ID because it works without looking at the phone. Face ID also has a limitation: it only works when you are looking at the phone, which can be inconvenient if you are wearing a mask or sunglasses (though Face ID can be set up with glasses, and it can recognize you with a mask if you have an Apple Watch).
Cost and Availability
Face ID is built into every iPhone since the iPhone X, except for the iPhone SE (2nd and 3rd generation), which still uses Touch ID. It is also used on iPads Pro and iPad Air. There is no additional cost for Face ID; it is included in the price of the device. However, if you damage the TrueDepth camera, repairs can be expensive, and Face ID may not work if the camera is replaced with a non-genuine part.
Frequently Asked Questions
Can Face ID be fooled by a photo?
No, a standard photo will not work because Face ID uses depth to verify that the face is three-dimensional. A printed photo or a screen showing a photo will not unlock the phone.
Does Face ID work with a mask?
With iOS 15.4 and later, Face ID can work with a mask if you have an Apple Watch. The phone uses the watch to authenticate when it detects a mask. Without an Apple Watch, Face ID will not recognize a face with a mask, but you can set up an alternative appearance that is a mask, though this reduces security.
Can someone force me to unlock my phone with Face ID?
In some legal cases, yes. If you are arrested, law enforcement may be able to hold the phone to your face to unlock it, because biometric unlocking is not considered a testimonial act. To prevent this, you can press the side button five times to disable Face ID and require a passcode.
Does Apple store my Face ID data?
No. Face ID data is stored only in the Secure Enclave on your device. Apple does not upload it to iCloud or any other server, and Apple cannot access it.
What happens if I have a twin?
Identical twins have a higher chance of fooling Face ID. Apple’s false match rate of 1 in 1,000,000 is for the general population, but for identical twins, the rate is much higher. Apple recommends using a passcode if you have an identical twin.
Can Face ID be used by apps?
Yes, apps can use Face ID for authentication, but they only receive a yes/no answer, not the face data itself. Apps cannot access the Face ID model or any biometric data.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.
More cards in this drawer
- Delete Picture Kik? How to Remove Photos
- Are Networked Implants Safe? What If One Fails?
- How to Stop WordPress Comment Spam: A Layered Guide
- What Happens to X Replies, DMs, and Followers After Deletion?
- Data Breaches That Shook the World
- Disable Google Assistant: Turn It Off on Android & Home