When Apple announced that its upcoming iPhone X would feature a depth-sensing camera for facial recognition, the company stressed that facial data used to unlock the phone would be securely stored on the phone itself. But Apple’s privacy promises don’t extend to a new and potentially vast use of the depth camera by iPhone app makers.