OkCupid Fed Three Million Faces to Facial Recognition, and the FTC Brought a Wet Napkin

The newsroom coffee tastes like burnt toner. Outside, sirens. Inside, the fluorescent buzz. On my desk: a case file that makes the core business model plain. The product is not your swipes. It is you. Your face. Your location. Your body, treated like an asset that can be moved around, then denied with a straight face.

The Federal Trade Commission says OkCupid shared nearly three million user photos, plus location and other personal information, with a facial recognition company called Clarifai. And the alleged reason is the same old tech-sector hymn: financial incentives came first, and the privacy policy got treated like optional packaging.

What the FTC says happened, and what the settlement actually does

Verified, not vibes: On March 30, 2026, the FTC announced an action against OkCupid (operated by Humor Rainbow, Inc.) and Match Group Americas. The agency alleges OkCupid violated its own privacy promises by providing an unrelated third party access to user data, including photos and geolocation. The FTC says the recipient had access to nearly three million photos along with location and other information, and that the sharing lacked formal or contractual restrictions on how that data could be used.

The FTC also alleges the companies took steps to conceal the sharing and obstruct the investigation, and later denied involvement when reporting surfaced that a third party had obtained OkCupid datasets.

Now, the order. It reads tough if you squint. A permanent ban on misrepresenting privacy practices, and a federal court filing in the Northern District of Texas. But there is no admission of wrongdoing. The proposed order states the defendants neither admit nor deny the allegations.

Reuters reporting underscored the headline fact: users were not told their information would be shared with Clarifai in 2014, contrary to OkCupid’s privacy policies.

Translation: “sharing” means transferring control of your face

Translation: when a company says it “shared data,” read “transferred control.” Your face moves from a space you thought was for dating into a space built to identify, track, and link people across datasets. And when the FTC flags that the recipient was not a service provider, business partner, or affiliate, that is regulatory language for: the policy did not cover it. They did it anyway.

Dating apps are toll booths on loneliness. They turn intimacy into a subscription, then treat the most personal data as surplus inventory.

Follow the money: investors got upside, users got permanence

Follow the money: the FTC says the recipient asked for the dataset because OkCupid’s founders were financial investors in the recipient. That is the incentive, in plain sight. A massive photo dataset is value. It helps build products and improve models. Users paid in permanence. You can change a password. You cannot change your face after a model has learned it.

Here is the mechanism: privacy becomes a marketing claim, not a right

Here is the mechanism: the U.S. enforcement posture treats privacy like a deception problem. If the policy says “we won’t,” the FTC can act when you do. So companies learn to harvest aggressively and draft policies with escape hatches. If public anger spikes, rewrite. If regulators arrive, settle without admitting. Another stipulated order. Another quarter closes.

The quiet part: they want you to blame yourself

The quiet part: the industry wants you to feel foolish for trusting them. “You should have read the terms.” That is emotional laundering for extraction. Privacy is a power relationship. When three million faces can be piped into facial recognition and the consequence is basically “don’t misrepresent next time,” the power imbalance is not debatable. It is documented.

Accountability options exist. Demand audits with teeth. Push lawmakers to treat privacy as a civil right with real penalties. Fund watchdogs. Back state attorneys general who litigate. Organize inside these companies. And stop rewarding politicians who treat Big Tech like a donor class instead of a regulated industry.