Yes, they could. In fact, there are data centers that require a handprint or retinal scan to access them. They store a biometric representation of you.