This is outrageously unethical. Someone scanning a barcode would have every reason to think that the code was being parsed locally on their phone. There would be no reason to upload an entire photo to read a barcode. Beyond which, not even alerting the user visually that their camera is picking up background stuff???

What if it's on their desk and there are sensitive legal documents next to it? How are you safeguarding all that private data? You could well be illegally in possession of classified documents, unconsenting nudes, all kinds of stuff. And it sounds like it's not even encrypted.