As reported by Bloomberg, the company also harvests fingerprint data when customers log into their accounts using the required fingerprint scanning technology.

I don't get it. What fingerprint scanning tech? Do they mean touchID? Isn't fingerprint auth on phones done locally? I thought apps don't have access to this data by design?