[hammock]

The ToS clearly says all "Customer Content/Customer Input" AKA your words, text, voice, face, etc can be used for "Product and Services Development" which could as easily be a facial recognition database, an FBI-style database of dirt on individuals, or literally anything else before it's an AI.

[glitcher]

ToS can't negate HIPAA or any other laws that could potentially be violated though.

[whiddershins]

HIPAA allows you to waive your privacy rights … not sure whether a TOS would count.