I was told years ago by some so called 'security tech expert' this is why he only uses old photos of himself or ones done on a potato phone, if any at all, on big social media sites. He claimed most companies that did this sort of thing are cheap and scrape FB, google images, Insta and the likes before going on to data provided by stores or states, if they use those at all.