In short. Facial images as personal data, what the terms actually govern, and the human assessment an algorithm cannot replace.
Key points
- A tool can measure precisely and handle images carelessly, or be imprecise and careful.
- The two are independent, and a good result on one says nothing about the other.
- The privacy question is answered by the terms rather than by the technology.
A facial photograph is a particular kind of personal data, and the risks attached to uploading one are different in kind from the risks attached to sharing an opinion. Understanding what the terms govern makes it possible to decide whether the exchange is worth making.
Why a face is different
A face identifies a person directly and cannot be reset. It also carries more than it appears to: software can estimate age, sex, emotion and other attributes from an image, none of which the person uploading it disclosed. A photograph shared once can be copied, stored and analysed repeatedly, and the practical meaning of deleting it depends entirely on where copies already exist.
What the terms actually govern
Consent terms vary widely and they are the operative document. The questions worth answering from them are whether the service is identified and reachable, whether images are stored or processed and where, how long they are retained, whether they are used to train or improve a model, whether they are shared with anybody else, and how deletion works. A service that answers those plainly is a service whose claims can be assessed; one that does not has not made the assessment possible.
Accuracy and privacy are separate questions
A tool can measure precisely and handle images carelessly, or be imprecise and careful. The two are independent, and a good result on one says nothing about the other. The privacy question is answered by the terms rather than by the technology.
The risks worth naming
A rating can move a person toward a treatment they had not decided to have, because a number is difficult to argue with. An unsupported label can delay the assessment that would have been correct, particularly where a lesion is concerned, because being told that something is nothing is more comfortable than being told to have it looked at. And a model trained on unrepresentative faces is least reliable for the people least represented in it, which is a harm that falls unevenly.
The alternatives
An examination by a clinician collects what no image contains: texture, tenderness, history and what someone actually wants. Standardised photography taken the same way over time is a valid record without any algorithm attached to it. Dermoscopy and, where indicated, a biopsy answer diagnostic questions that no photograph-based tool is cleared to answer. A teleconsultation with a person is the closer comparison to an automated first contact, and it has the advantage of somebody on the other end who can be questioned.
Before you upload a photograph
- Who holds the image, where, for how long, and is it used to train a model?
- Is this tool cleared for a named task, or is it making no regulated claim at all?
- If the answer you receive is one you dislike, is there a person you can ask about it?
None of these questions requires technical knowledge. They require only that they be asked before the upload rather than after, when the answer can still change what you do.
Frequently asked questions
Why is a facial image different from other personal data?
Because it identifies you directly, it cannot be reissued the way a password can, and it can be analysed for attributes you never disclosed. Once it has been uploaded and shared onward, withdrawing it is a request rather than a guarantee, which is why the terms matter before the upload rather than after.
What should I check before uploading a photograph?
Whether the service is identified, what the terms say about storage, retention and sharing, whether the image is used to improve a model, and how to ask for deletion. A service that does not answer those questions plainly has not made the answers available to you.
What can a clinician do that an app cannot?
Examine tissue, take a history, judge whether your expectations are achievable, and take responsibility for the advice given. Those four things are what a consultation consists of, and none of them is available from an image, however good the software.
Risks & Limitations
- Software measures an image; it does not examine tissue, and an examination is what a diagnosis usually turns on.
- A rating reflects what a model was trained on rather than a standard of beauty, and it is least reliable for faces least represented in its training data.
- Agreement between software and clinicians is measured against an opinion, not against correctness.
- A predicted image is a drawing of a plan expressed in a body the model does not describe.
- No algorithm takes a history or carries responsibility for the advice it gives.
When to Seek Care
- A new or changing lesion, a mole changing in size, shape or colour, or a sore that is not healing — have it examined by a clinician rather than assessed from a photograph.
- A skin change you are worried about, whether or not a tool has told you it is nothing.
- A reaction, infection or worsening after treatment — contact the service that holds your records.
- If you have uploaded a facial image and want to know how it is held or want it deleted, ask the service that holds it under the terms you accepted.
References & Further Reading
- U.S. Food and Drug Administration (FDA) — guidance and authorisations for software as a medical device and for image analysis
- European Commission and notified bodies — Medical Device Regulation and artificial intelligence guidance
- National Medical Products Administration (NMPA, China) — approved software and its named claims
- World Health Organization (WHO) — guidance on the ethics and governance of artificial intelligence for health
- Cochrane Library — systematic reviews of diagnostic and decision-support software
This page is patient education, not medical advice, and it does not cite individual studies. It reviews evidence and regulation; it is not a booking page and does not recommend a treatment. Discuss your own case with a qualified clinician. To ask a question about this review, see Contact & Consultation.