[zamalek]

TL;DW: the "cloud" that everyone is up in arms about is just a rendezvous/temporary storage for mobile notifications.

Facial recognition identifiers are not uploaded if you turn the facial recognition feature off. Identifiers are not known to correlate across accounts, and so potentially obfuscate instead of correlate.

This is likely a reasonably private system that any one of us could have designed. It all comes down to the retention policy (which is not known).