So I usually speak against just letting companies have your data. This is one of the reasons why. Data might seem harmless, but it is often rich with inference-able structures. Not to mention this kind of data does not deprecate.
Original research
https://arxiv.org/abs/1611.04135
Article overview with less math-speak
https://www.technologyreview.com/2016/11/22/107128/neural-network-learns-to-identify-criminals-by-their-faces/
So..
- Your face alone could give away that you are an independent thinker, had an atypical childhood, or anything that puts a criminal record on you in China.
- Law abiding citizens in tend to all look like each other.