Nine million faces, indexed for matching, readable by anyone with the URL. Nobody in the store was ever a customer.