+ Access both the front and the back camera
+ Record you at any time the app is in the foreground
+ Take pictures and videos without telling you
+ Upload the pictures and videos without telling you
+ Upload the pictures/videos it takes immediately
+ Run real-time face recognition to detect facial features or expressions
+ Live stream the camera onto the internet
+ Detect if the user is on their phone alone, or watching together with a second person
+ Upload random frames of the video stream to your web service and run a proper face recognition software which can find existing photos of you on the internet and create a 3d model based on your face
Source, by the way, from a former Google engineer krausefx.com/blog/ios-priva…