That "Try On Glasses" Button Just Mapped Your Face 468 Ways

You click "try on" on an eyewear website. Ten seconds later, you see yourself wearing three different frames. Cool feature, right? Here's the thing nobody mentions: in those ten seconds, software may have quietly mapped your face to 468 specific anatomical reference points — measuring the distance between your eyes, the width of your cheekbones, the height of your nose bridge — and stored that geometric blueprint somewhere you can't see or access. You didn't sign anything. You didn't read a disclosure. You just wanted to see if the frames looked good.

A recent ruling from the Seventh Circuit — a federal appeals court that covers Illinois, Indiana, and Wisconsin — just made that invisible transaction a lot more visible. And the lesson buried inside this court case is something every online shopper should understand, because it changes how you think about every "try before you buy" feature you've ever clicked.

A Photo and a Measurement Are Not the Same Thing

This is the part that trips everyone up. When you think "they took a photo of my face," you probably think: so what? Photos are everywhere. Your face is on Facebook, Instagram, your company's website. What's the big deal?

The big deal is the difference between a snapshot and a blueprint.

Think of it this way. A face photo is like a postcard of your house — it shows what the front looks like. Face geometry is the architectural blueprint — it records the actual measurements, distances, and proportions. One tells you what something looks like. The other tells you exactly how it's built. And those are very different things, legally and practically.

Virtual try-on software doesn't just look at your face. It measures it. According to technical documentation reviewed by EDUCBA, these systems detect approximately 468 anatomical reference points across your face — landmarks like the corners of your eyes, the tip of your nose, the edges of your jawline. From those points, the software extracts specific measurements: the distance between your pupils, how wide your face is at the cheekbones, how high your nose bridge sits. It uses those numbers to recommend frames that will physically fit your face. This article is part of a series — start with Retail Facial Recognition Washington Privacy Gap.

That's not a filter. That's a facial geometry extraction. And once software measures you, you've crossed from "person looking at a shopping tool" into "source of regulated biometric data." (Biometric data means the physical measurements unique to your body — your face geometry, fingerprints, voice pattern, iris. The stuff nobody else has in exactly your configuration.)

The Case: Glasses, a Court, and a Claim That Didn't Hold Up

Illinois has a law called BIPA — the Biometric Information Privacy Act. It's one of the strongest consumer biometric protection laws in the country. Under BIPA, if a company collects your facial geometry, they have to tell you about it in writing before they collect it. They need your written consent. They can't sell your biometric data. And they have to have a clear, publicly available policy explaining how long they'll keep it and when they'll destroy it.

Violate those rules? Each negligent violation costs $1,000 in statutory damages. Each reckless or intentional one costs $5,000. Per person. Multiply that by the number of people who clicked "try on," and you start to understand why class action lawyers are paying very close attention to virtual fitting rooms.

The eyewear company in this case — a manufacturer of specialty computer glasses — tried a specific legal maneuver. Their glasses are marketed for eye health: reducing blue light exposure, easing digital eye strain. So they argued their product fell under a healthcare exemption in BIPA, which would have shielded them from the law's consent requirements entirely.

The Seventh Circuit didn't buy it.

"Better-appearing glasses are not medical treatment." — Judge Frank H. Easterbrook, Law.com

Four words. Entire case revived. The court's point was sharp: just because a product has a health-adjacent purpose doesn't mean the data collection tied to it gets a free pass. The company needed actual evidence that its virtual try-on tool qualified as a healthcare application. Claiming health benefits on the product page isn't the same thing. As DiCello Levitt noted in their case analysis, the court revived the class action and signaled a more skeptical approach to BIPA's healthcare exemption going forward. Previously in this series: Try On Sunglasses Online A Court Just Said Your Face Is Wort.

The company didn't even dispute that facial geometry counts as biometric data under the law. They just hoped the exemption would save them. It didn't.

Why Everyone Gets This Wrong (And It's Not Your Fault)

Here's the misconception that makes this confusing: most people think a virtual try-on is basically a Snapchat filter. You see yourself with dog ears, or in this case, with frames on your face. It feels like a visual trick — the app just drapes an image over your camera feed. Nothing's really being measured, right?

Wrong. And here's exactly why that instinct makes total sense but leads you astray.

The output looks like a filter. Glasses appear on your face. They move when you move. It feels playful and visual. What you can't see is the step happening before that image renders: the software is extracting geometry from your face in real time, crunching those 468 data points, and using the resulting measurements to figure out which frame width actually fits your face proportions. The measurement is invisible. The result looks like magic. You experience the magic and miss the measurement entirely.

According to an analysis by ArentFox Schiff, most companies quietly classify virtual try-on measurements under "usage data" in their privacy policies rather than labeling them as biometric data. That's not an accident. "Usage data" sounds boring and harmless. "Biometric data" sounds like something that belongs in a spy movie. Companies know which one you're more likely to scroll past.

And here's the kicker the Seventh Circuit underlined: Illinois's BIPA explicitly carves out photographs from its protections. A regular photo of your face isn't covered. But — and this is the part that matters — biometric information derived from a photograph absolutely is. The law doesn't care what you started with. It cares what you extracted. Measure a face from a photo, and you've created protected biometric data, even if all you had going in was a selfie. Up next: Your Face Is Being Scanned At The Grocery Store And Washingt.

The Bigger Pattern You Should Know About

This case isn't a one-off oddity. Since BIPA took effect in July 2017, more than 25 cases have been filed in Illinois courts alone against an unexpectedly wide range of businesses — video game companies, food manufacturers, gas stations, even restaurant chains — all over face geometry collection in ordinary, everyday settings. The eyewear case fits into a broad and accelerating wave of enforcement.

That matters because virtual try-on is everywhere now. Glasses, jewelry, hats, makeup, hair color. Furniture companies let you "place" a couch in your living room using your phone's camera. The same underlying technology — facial landmark detection feeding into measurement and recommendation — powers more shopping experiences than most people realize. At CaraComp, where we work with facial comparison technology professionally, this distinction between a face image and face geometry is one we deal with constantly. The court's logic here tracks exactly: it's not what you collected. It's what you extracted from it, and whether you told anyone you were doing it.

The ruling from the Seventh Circuit, as Quarles Law Firm analyzed in their breakdown of the decision, signals that courts are tightening the standards for healthcare exemption claims. Going forward, "we sell a health product" won't be enough. Companies will need to show, with actual evidence, that their data collection qualifies as a healthcare activity. That's a meaningfully higher bar — and it closes a loophole a lot of companies were quietly counting on.

So here's the question worth sitting with: the next time a website asks to access your camera for a "fitting" or a "try-on," you now know there's a difference between a site that drapes a graphic over your image and one that quietly extracts a geometric map of your face. One of those is a filter. The other is a measurement. And measurements, it turns out, have a paper trail — or they're legally supposed to.

What would you want that disclosure to actually say before you click "continue"?