Comment by BobaFloutist

They could verify ID, associate you with an "ID verified" token, and immediately trash all the information they collected other than that token.