It just occurred to me that I'm not sure how they can even be sure that you were telling them the truth. Not that I'm suggesting otherwise, but within the scope

It just occurred to me that I'm not sure how they can even be sure that you were telling them the truth. Not that I'm suggesting otherwise, but within the scope of the tools they have available to them while doing the review, what's to prevent you from saying "sure, we're keeping everything on device" when in fact you're building an international database of faces that you intend to sell to a nefarious government actor.