Storing biometric data on a device – like the iPhone's TouchID or Face ID – is considered safer than storing it with a service provider, even when the data is encrypted. That risk is similar to that of a password database, in which hackers may breach the system and steal data that's not effectively secured.