"the system does not retain (identifying) pieces of information, and the (identity) checking companies do not know what service is being used."