Ring sued over faces scanned without consent in Familiar Faces launch

A Virginia man is taking Amazon and its Ring subsidiary to court over Familiar Faces, the company’s AI-powered doorbell feature that identifies frequent visitors. Charles Sigwalt says the product can capture faces, convert them into biometric data, and store that information without the knowledge or consent of the people in frame. That alleged reach matters because Ring doorbells are installed at front doors, which means the technology can touch not just customers, but family members, delivery workers, neighbors, and even people just walking by.

The lawsuit lands on a product Ring has publicly described as opt-in and not enabled by default, under a “Built with Privacy in Mind” heading in its marketing. But Sigwalt’s argument is simpler and more uncomfortable: even if the homeowner turns it on, anyone within the camera’s field of view may still be processed by facial-recognition tech. The complaint says Familiar Faces creates “faceprints,” which it compares to fingerprints, and turns facial images into mathematical templates that can later be used to recognize the same person. Those profiles and related facial-recognition data are stored in Amazon’s cloud, not just on the device, which is where the privacy fight becomes much bigger than a single smart doorbell.

For Ring, Familiar Faces is part of a familiar consumer-tech playbook: make the device smarter, make the product more useful, and give customers a reason to stay inside the ecosystem. Launched in December 2025 in the US and April 2026 in the UK, the feature allows customers to create up to 50 profiles for frequent visitors so the doorbell can tell them exactly who is at the door, rather than merely that someone pressed the buzzer. That convenience pitch is easy to understand. The legal risk is the harder part. The complaint says the feature subjects anyone in view to facial recognition, including people who never knowingly interact with the device, and that biometric identifiers could be repurposed for broader surveillance. Sigwalt cited an Electronic Frontier Foundation blog for that concern, although the complaint does not allege Ring has used Familiar Faces for mass surveillance. Ring has also said it would not be technically capable of identifying every camera that detected a particular individual.

The retention issue gives the case another layer. The complaint says faceprints are retained for 30 days for unrecognized faces and 180 days for faces with saved profiles, but argues the data can outlast those windows because saved profiles return to Ring accounts after unsubscribing from the service. That is the kind of allegation that tends to matter far beyond one lawsuit, because retention, deletion, and reactivation rules are where “privacy by design” claims either hold up or fall apart. If customers assume a profile disappears when they leave the service, but the profile later reappears, executives in adjacent sectors will recognize the same problem: product behavior can matter more than privacy copy.

Sigwalt also says Ring had every opportunity to follow stricter biometric rules and chose not to. In the complaint, he points to Ring’s confirmation that Familiar Faces will not operate in Illinois, Texas, or Portland, Oregon. Those exclusions matter because they show the company can adjust geography when the law gets too specific to ignore. Illinois and Texas impose consent requirements for certain biometric data collection, while Portland restricts facial-recognition technology in public accommodations. Sigwalt’s line, as quoted in the complaint, is blunt: “Ring clearly has the ability to follow biometric privacy laws … but chooses not to.” For other product teams, that is the warning sign. If a system is compliant in some places and absent in others, the design team already knows the feature can be limited. The open question is whether it is limited everywhere else, too.

The lawsuit goes beyond state-law privacy claims. Sigwalt says Ring’s conduct violates Virginia consumer protection, computer crimes, and privacy laws, and he also argues it runs afoul of Federal Trade Commission standards. He cites a 2023 FTC policy statement that flagged possible violations when a company engages in “surreptitious and unexpected collection or use of biometric information,” among other things. That framing matters because the FTC angle turns this from a narrow state-court dispute into a broader compliance story. Companies rolling out AI features often focus on whether the customer clicked yes. Regulators are increasingly asking a different question: who else got swept up in the process, and did they ever have a real chance to understand or refuse it?

The remedies Sigwalt is seeking show how high the stakes could climb if the case gains traction. He wants the court to stop Ring from using facial recognition in its current form, award damages to class members, require the Amazon subsidiary to transfer profits into a constructive trust, and cover the plaintiffs’ legal fees. Amazon did not immediately respond to a request for comment, but the company did try to calm nerves before the US launch. In October 2025, Ring answered a series of EFF questions publicly, with spokesperson Emma Daniels saying the data collected for Familiar Faces is not used to train any AI models or algorithms. Daniels also said Ring would not be technically capable of responding to a law enforcement request to identify all the cameras that had detected a given individual. The EFF has likened Familiar Faces to Search Party, Ring’s AI feature for helping locate lost pets, which has also drawn privacy concerns. For executives shipping AI into homes, the message is clear: if your product can recognize faces at the front door, your privacy posture has to survive contact with everyone who never signed up for it.