Amazon One is DANGEROUS

I so wanted to scan my palm to pay at Whole Foods, but I would never want to give a high-definition image of my palm to anyone. If all Amazon One did was extract a hash from the image on-device, and never save the image, then I would consider the system secure.

It’s fine for Amazon to store the hash (“palm signature”) centrally - they can never use it to impersonate me, only to authenticate me. BUT, storing the image, even in a secure environment, opens the possibility that a nefarious actor impersonates me. There is no 100% security.

So before I signed up, I researched whether Amazon stored my palm image… and to my horror, they do.

When you scan your palm, the palm and vein images are immediately encrypted and sent to a highly secure zone in the AWS Cloud, custom-built for Amazon One, where your unique palm signature is created. Access to this area of the cloud is highly restricted to select AWS employees with specialized expertise to manage this cloud environment.

Why doesn’t Amazon extract the palm signature on-device, the way fingerprint sensors work on phones?

I DO NOT entrust my biometrics to anyone, let alone Amazon, and no one should.

Thanks but no thanks.