I would like to believe that the firmware just hashes the biometric signals and forgets about them. But I found nowhere that verifies this.