Giving Facebook my picture, in conjunction with ID, is a sure way for the entire platform to do facial recognition on all existing pictures.
They already do it, but such a time save to 100% verify who is who.
And even if you esque facebook, never have an account, you're one step away from the same happening after a buyout, data share agreement, etc.
Banks often get around data sharing laws, by jointly buying companies to perform tasks. Thus, bank 1 owns 20% of an ID company, along with 4 other banks, and can write agreements such as "our associated companies" and such blather.
Inside that ID corp, all 5 entites can share data, aggregate it, anonymized it, and then sell it.
And as we all know, de-anonymizing is trivial... and if one knows who you are, they now all do, simply via the parent corp buying(for pennies) and de-anonymizing.
