Using biometric data without permission may be illegal. Facebook was sued in Illinois over this.