With little warning or regulation, companies are increasingly using facial recognition technology on their customers — as a security measure, they say. But what happens when the systems are actually being used to punish the companies’ enemies?