The tech giant makes a $550m settlement to users over storing biometric data without user consent.