> The biometric data used to support Windows Hello is stored on the local device only. It doesn't roam and is never sent to external devices or servers. This separation helps to stop potential attackers by providing no single collection point that an attacker could potentially compromise to steal biometric data.

https://docs.microsoft.com/en-us/windows/security/identity-p....

Windows Hello is opt-in and also has many other providers other than facial recognition