Serious concerns have been raised that ID.me does not adequately protect the highly sensitive data it collects. The company centralizes vast amounts of personal and biometric information, relies on outsourced contractors, and has faced repeated criticism for opaque practices around data storage, sharing, and facial-recognition technology. These issues have led many to warn that trusting ID.me with your information may expose you to unnecessary privacy and security risks.