Stripe Identity
Considering that Stripe was originally known for letting websites accept credit card payments without seeing your credit card number, one might assume that Stripe Identity only allows websites to see the verification result, and not your selfies and scans of your identity documents.<p>That would be an incorrect assumption.  Per <a href="https:&#x2F;&#x2F;support.stripe.com&#x2F;questions&#x2F;managing-your-id-verification-information#data-access" rel="nofollow">https:&#x2F;&#x2F;support.stripe.com&#x2F;questions&#x2F;managing-your-id-verifi...</a> customers of Stripe Identity have API access to &quot;captured images of the ID document, selfies, extracted data from the ID document, keyed-in information, and the verification result&quot;.<p>Thus, when you use Stripe Identity to verify your identity, you have to trust that:<p>1. The website doesn&#x27;t download, retain, and later leak your selfie and identity information.<p>2. The website&#x27;s Stripe API token isn&#x27;t compromised and exploited by identity thieves to access your selfie and identity information.<p>Stripe appears to be leaning heavily on their claim that they don&#x27;t disclose &quot;biometric identifiers&quot; to websites and that these &quot;biometric identifiers&quot; are deleted from their systems within 48 hours. This is extremely deceptive considering that biometric identifiers can be reconstructed from the selfie.