Some people are said to be unaware that their data had been used for a facial-recognition project.