Mastercard is piloting technology that lets customers pay with their face, a smile or a wave. The company has outlined a set of standards that apps must comply with to ensure the security and privacy of personal data. But a Human Rights Watch researcher warns about the high risks of sharing unique and irreplaceable biometric data.