AI Face Search Tool Raises Privacy Alarms
An AI tool called Sherlock AI Face Search is drawing scrutiny after it was reportedly used to identify unredacted individuals in the Epstein files. The tool's capabilities highlight the growing tension between powerful AI technologies and data privacy regulations.
The "Sherlock: AI Face Search" app is a publicly available tool on the Apple App Store developed by Zachary Yudenfriend. It allows users to upload a photo of a person's face to find their social media profiles and appearances in blogs and news websites, claiming to have indexed over one billion faces. The app is marketed as a way to verify identities and avoid online scams like "catfishing." This tool is part of a growing category of powerful, consumer-facing facial recognition search engines that operate in a gray legal area. Similar services, like PimEyes, offer monthly subscriptions for users to perform searches and set up alerts for when new photos of a face appear online. These services function by scraping vast numbers of images from public websites and social media platforms. The practice of scraping images to build commercial facial recognition databases is highly controversial and has attracted legal challenges globally. Clearview AI, a company that provides similar services to law enforcement, has been fined millions of dollars in Europe and found to have violated Canadian privacy laws for collecting images without consent. Data protection regulations are struggling to keep up with the technology. The EU's AI Act, for example, aims to prohibit the "untargeted scraping" of facial images from the internet to create such databases. In the United States, there is a patchwork of state-level laws, with Illinois' Biometric Information Privacy Act (BIPA) being one of the strictest, requiring written consent before collecting biometric data. The core tension lies in the fact that while images may be publicly posted, individuals have not consented to their biometric data being cataloged in a searchable database. Unlike a compromised password, a person's biometric information, like their face, cannot be changed, raising significant security and privacy risks if these databases are breached. These powerful search tools are marketed for personal safety, but privacy advocates warn they can be easily misused for stalking and harassment. The ability for anyone to potentially identify a stranger from a single photo highlights a profound shift in personal anonymity, both online and in the physical world.
