[potatolicious]

The fingerprint is kept locally only. Presumably when it uses it to authenticate a purchase it's actually validating locally and sending up your password (or other auth token) rather than sending the biometrics directly.

[amenod]

Yes, exactly - the said men from the government assured us this was so. :)