Doing it via a photo implies facial recognition, which can potentially be more creepy for people. Is it happening on device or in the cloud? Do I need to register my face when joining the service? What happens to that data if the service is sold at some point in the future?