Half of American adults appear in facial recognition databases — and police are using them with almost no oversight