Something I think that should be mentioned: Everytime you submit an image of an id: That gets shared through out the verifying organizations communication channels.

Wither it's via database accessibility (even if it's encrypted), a web front end, email, or IMs. They'll say all they want, but ids do leak.