Sorry, I should amend that last statement to be using the model Apple is using with it's touch ID where the fingerprint simply authenticates use of a high entropy password stored on the device, and the datum of the fingerprint is in not sent.