Your Phone Scanned 10,000 Faces. You Never Said Yes.

Samsung just won a lawsuit about the way its phones group faces in your photo library. The headlines made it sound like a clean victory. It wasn't. The court basically said: we're not sure Samsung actually has your face data — so the case can't go forward yet. Meanwhile, Apple is facing a $32.5 billion lawsuit for doing the exact same thing. Same feature. Completely different outcome, at least so far.

Here's the thing nobody's saying loudly enough: this isn't really about Samsung or Apple. It's about a feature sitting quietly on almost every smartphone sold in the last five years. Open your photos app. See that "People" album, or "People & Pets"? Your phone has been scanning every face in every picture you've ever saved, grouping them by who it thinks they are — without stopping to ask you first.

That's the privacy fight sitting in your pocket. And it just got a lot more interesting.

What Samsung Actually Won — And What It Didn't

On August 7, 2026, the Seventh Circuit Court of Appeals (a federal appeals court that covers Illinois, Wisconsin, and Indiana) declined to let a proposed class-action lawsuit against Samsung move forward — at least not the way it was originally filed. The reason? The court found that the people suing hadn't made a strong enough case that Samsung actually possesses their face data.

The distinction the court drew is subtle but important. According to Law360, the court found that Samsung's gallery app groups faces that it cannot identify by name — essentially creating clusters of "unknown person A," "unknown person B" — and leaves the labeling to you. The argument: if Samsung doesn't know whose face it is, does it really "have" your biometric data? The court wasn't sure the plaintiffs proved Samsung did.

This is not the same as the court saying face-tagging is harmless. It's more like a judge saying "prove your fingerprints are in their filing cabinet before you can sue them for taking your fingerprints." The underlying act — scanning your face — isn't what got thrown out. The lawsuit's framing did. This article is part of a series — start with Identity Verification App Signup Face Scan What You Should K.

"The legal disputes center not on whether face-tagging helps users, but on whether users knew it was happening and agreed to it." — Expert analysis, Biometric Update

That consent question is exactly why this story isn't over. Not even close.

Apple Is Next — And the Number Is Staggering

While Samsung was celebrating a narrow technical win, Apple was staring down a lawsuit involving 6.5 million people in Illinois alone. The potential damages? $32.5 billion. That number comes from Illinois law, which allows for $5,000 per violation — per person — when a company collects biometric data (your face, fingerprints, iris scans, the physical stuff that's uniquely yours and can never be changed) without proper consent.

According to PetaPixel, the lawsuit centers on Apple's Photos app — specifically the "People" feature that automatically identifies and groups faces across your entire camera roll. The claim: Apple never told Illinois users this was happening, never got their written consent, and never explained how long it planned to keep that face data.

If that sounds familiar, it should. Facebook paid $650 million in 2021 to settle a nearly identical case about its photo-tagging feature. Google paid $100 million. Both cases were brought under the same Illinois law — the Biometric Information Privacy Act, passed back in 2008, which was the first state law in the country to specifically regulate this kind of face data collection. Illinois was early. It was also right to be worried.

Here's where it gets genuinely strange. Two courts. Same feature. Completely different legal conclusions about whether what's happening to your photos counts as collecting your biometric data. One court says maybe Samsung doesn't really "have" your face data. Another court is treating Apple's identical Photos feature like a $32.5 billion problem. Someone is going to have to get this right — and until they do, every face in every photo you've saved is caught in the middle.

Why Your "People" Album Is a Bigger Deal Than You Think

Most people turn on face grouping because it's genuinely useful. You type "Mom" and every photo with your mom in it pops up. You're searching for a specific vacation and you can filter by who was there. It feels like a helpful assistant, not a surveillance tool. Previously in this series: That Damning Video Of Your Coworker Dont Believe It Until 3 .

But here's the thing about your face that makes it different from, say, your email address or your phone number: you cannot change it. If your password gets leaked, you change your password. If your face data gets mishandled? That's permanent. According to a legislative review of facial recognition regulation across states, there is still no federal law that expressly regulates how companies can collect and use this kind of face data commercially. The only real enforcement tool right now is state law — and only a handful of states have strong protections.

That regulatory gap matters for you. It means your phone's "People" album is operating in a legal gray zone — helpful on Tuesday, potential lawsuit on Wednesday, depending on which state you live in and which court happens to hear the case.

And there's one more wrinkle people overlook: it's not just your face in those clusters. Every friend, relative, coworker, or stranger who shows up in your photos is getting scanned too. They never agreed to anything. They probably don't even know.

What You Can Actually Do Today

Look, nobody's saying you need to delete your photo library. But this is worth 90 seconds of your time tonight.

On an iPhone: go to Settings, scroll to Photos, and look for "Show People & Pets Album." You can turn it off. On Android phones (including Samsung): open the Gallery or Google Photos app, go into settings, and look for "Group similar faces" or "Face grouping." These settings exist. They're just not advertised.

Turning off face grouping doesn't delete the face data that's already been processed — that's a separate, murkier question — but it stops new scanning and stops the app from building out those clusters going forward. If you're in Illinois, Texas, Washington, or a handful of other states with strong biometric privacy laws, you actually have more legal rights around this than most people realize. Worth knowing. Up next: That New App Wants Your Face Before Youve Even Used It.

If you've ever wondered whether a photo or profile is really who it claims to be — whether someone's online identity matches the real person behind it — that's exactly the kind of question that thoughtful identity verification is built to answer. The difference between that and what your photo app does? Consent. You ask the question; the phone just answers it about everyone, all the time, without being asked.

The lawsuits will grind through the courts for years. Legal teams will argue about what "possession" means and whether clusters of unnamed faces count as biometric data. Billions of dollars will change hands — or won't. By the time any of it settles, courts in cases like Apple's will have already set precedents that reshape how every phone maker handles your camera roll.

In the meantime, your "People" album quietly grows. A new face clusters. A label gets applied. The question isn't whether any of that is convenient — it obviously is. The question is whether you ever actually said yes.

Do you check whether your phone or cloud photo app is grouping faces automatically — or do you leave those settings alone? Most people have never even looked.