Or better, how about simple and honest business models? "Shutterfly is a photo printer, so they make money by charging people to print photos." No biometric database is needed.
Know that you're just giving an example. Points about simple and honest business model comment. Maybe this is considered simple now in terms of the Valley. The honest part, almost no one reads the TOS/EULA.
So I have tons of images associated with accounts. So, why can't I do a 'google' and image mine too? Aaaand, I can sell the results to whatever data company?
Suddenly, higher margins and fulfills corporate charter.
(By the way, too high margins are even illegal in some countries)
Companies that buy the aggregate big data package of all individual customers are also customers.
A simple EULA boilerplate "we can do whatever we want with your images" is usually enough to disclaim liability or privacy... Because you chose to upload them out of your control.
I didn't say it was ethical.