Your Neighbor's Doorbell Just Put Your Face in Amazon's Database

Your neighbor got a Ring doorbell camera last Christmas. You've walked past it a hundred times on the way to their door. You never signed anything. You never clicked "I agree." But there's a real chance your face has been scanned, measured, and stored in a database you've never heard of — and a federal lawsuit filed this June says that's exactly the problem.

One Camera. Everybody's Face.

Amazon launched "Familiar Faces" quietly in December 2025. The pitch was reasonable enough on the surface: let your Ring camera learn to recognize your family, your regular dog-walker, your regular delivery driver, so it can alert you when someone unexpected shows up. Sounds useful. Maybe even comforting.

Here's what Amazon didn't mention loudly: the camera doesn't just learn your family's faces. It scans every face that walks into its frame — and it builds what's called a faceprint (think of it like a facial fingerprint — a precise mathematical map of someone's face) for all of them. Anyone who walks up to that door. The UPS driver. The neighbor who borrowed your jumper cables. Your kid's new friend. Your ex. None of them consented to anything. None of them were told.

That's the argument at the center of a class action lawsuit filed in early June 2026, detailed in reporting by TechCrunch. The plaintiffs aren't arguing that Ring cameras are illegal. They're arguing that facial recognition without consent crosses a line — specifically under Illinois's Biometric Information Privacy Act, also known as BIPA (that's the state law that says companies need your permission before they collect or store body-based data like your faceprint, fingerprints, or iris scan).

Let that number settle in for a second. Four in ten American homes. That is not a niche tech product anymore. That is infrastructure. This article is part of a series — start with Face Detection Before Identification How Facial Analysis Act.

The Opt-In That Only Covers One Person

Amazon's defense is straightforward: Familiar Faces is optional. Ring owners have to turn it on. Nobody's forced to use it.

That argument has a pretty significant hole in it, though. When a homeowner opts in, they're making a privacy decision on behalf of every single person who will ever walk up to their door. The mail carrier didn't opt in. The babysitter didn't opt in. The friend who comes over twice a year and has no idea what Familiar Faces even is — definitely didn't opt in.

"Ring's Familiar Faces feature violates basic notions of consumer privacy by collecting and storing the biometric data of individuals without their knowledge or consent." — From the 28-page class action complaint, as analyzed by ClassAction.org

Ring does offer some technical safeguards. According to the company, face data is encrypted, unrecognized faces are deleted after 30 days, and the data is never shared. Those are real protections. But encryption and deletion timers don't retroactively ask anyone for permission. And under BIPA, you can't collect someone's biometric data and then point to your security practices as a substitute for consent. The permission has to come first.

The lawsuit is seeking $5 million in damages — though legal analysts following the case, as reported by Recording Law, suggest that number may actually be conservative. BIPA allows for statutory penalties of $1,000 to $5,000 per violation — meaning per scan, per person, potentially — even when there's no data breach and no one was defrauded. The law exists specifically because the harm isn't always visible until it's too late.

The Map Only Shows Three States

Here's the detail that should make you raise an eyebrow. Familiar Faces is not available in Illinois, Texas, or Portland, Oregon. Not because the technology doesn't work there. Because those places have biometric privacy laws strong enough to make Amazon nervous.

Think about what that means. Amazon knew — going into the December 2025 launch — exactly which legal environments were risky enough to stay out of. The feature works fine everywhere else, where there's no law standing in the way. That's not a company being careful with new technology. That's a company doing a very deliberate calculation about where the legal exposure is "manageable," as the Captain Compliance analysis puts it. Previously in this series: Deepfake Porn Classmates School What Parents Need To Know.

Senator Ed Markey saw this coming. When Amazon announced Familiar Faces back in September 2025, Markey pushed back publicly, raising exactly these consent concerns. Amazon launched it anyway in December. Sometimes the warning signs are pretty loud and the launch happens anyway.

Your Porch Is Now a Privacy Boundary

We've had this debate before — about police using facial recognition, about airports scanning travelers, about workplaces tracking employees. Each time, the conversation has been about institutions doing the scanning. This is different.

When 40% of American homes have a doorbell camera, and some of those cameras are building faceprint databases, the surveillance isn't coming from a government building or a corporate campus. It's coming from your neighbor's front step. The porch — the most casual, neighborly, everyday threshold there is — has quietly become a biometric checkpoint for anyone who crosses it.

That's not a dramatic overstatement. That's the structure of what Familiar Faces actually does. As the Biometric Update reporting on the federal court filing lays out, the class action explicitly centers on the structural consent gap — not the technology's accuracy, not its security, but the fundamental question of who gets to decide whether your face becomes a data point.

And that question has no good answer right now. Which is why this case matters beyond the $5 million figure. Up next: Before Facial Recognition Names You It Has To Find You And T.

If you've ever looked at a photo of someone online and wondered whether that person is actually who they claim to be, you already understand the core issue at stake here. Identity — the question of who's really there, and whether they consented to being identified — is the thread running through everything from front-door cameras to online scams to AI-generated fakes. That instinct to verify, to double-check, to not just trust a face at face value? That's exactly the right instinct to have right now.

One practical thing you can do today: if you have a Ring camera, check your app settings and look for anything labeled "Familiar Faces" or "Face Recognition." If it's turned on, think about whether your regular visitors — your kids' friends, your neighbors, the people who show up at your door without much thought — know about it. They probably don't. You can turn it off. That's a real choice, available right now, that protects the people who knock without knowing they're being scanned.

Amazon's decision to block Familiar Faces in three specific states tells you everything you need to know about how they view the legal risk versus the commercial opportunity everywhere else. They know how to comply with strong privacy rules. They've proven it. The question for every other state — and every other visitor walking up to a camera-equipped door — is whether "we'll comply if we have to" is good enough.

Right now, in most of the country, it is. And that's the part that should keep you up at night — not the camera on the door, but the fact that the rules protecting the people who walk past it were written before Amazon built the thing that watches them.