'My Whole History, Replaced by a Stranger's Photo': SF Residents Speak Out on Duplicate Image Errors

Maria G. runs a small alterations shop on Irving Street in the Inner Sunset. Last February, she went to renew her business license through the city's online portal and discovered that her profile photograph had been replaced by an image of a woman she had never met. The record showed the stranger's face, but her name, her tax ID, her address. She spent eleven weeks sorting it out with the Office of the Treasurer and Tax Collector before the error was corrected.

She is not alone. Across San Francisco, residents and small-business owners are surfacing a frustrating and, in some cases, financially damaging problem: duplicate or misassigned images in digital records maintained by city agencies, healthcare networks, and major online platforms. The issue cuts across neighborhoods and demographics — from seniors trying to access services at the Tenderloin Neighborhood Development Corporation to gig workers whose profile photos on delivery apps have been swapped with another user's image, triggering account suspensions.

A Problem Without a Clear Owner

The timing matters. San Francisco is in the middle of a broad push to digitize public services — driven partly by the post-pandemic backlog in city hall departments and partly by a tech-sector-funded modernization agenda that accelerated in late 2024. When agencies migrate legacy systems, duplicate image records are a known byproduct. The city's Department of Technology has flagged database deduplication as an ongoing challenge in internal modernization reviews, though no public report has quantified how many residents have been affected in the current cycle.

Community organizers at the Tenderloin-based Glide Memorial Church say they have helped at least two dozen clients in the past six months who arrived with paperwork problems tied to mismatched ID photographs. The errors have prevented some individuals from accessing housing vouchers and health services because the photo on a system record did not match the government-issued ID a caseworker was checking against. Glide staff were not available for comment by press time, but community members described the process at a public meeting held at the Main Branch of the San Francisco Public Library on Larkin Street in June.

Roberto T., who lives in the Excelsior District and uses Medi-Cal for primary care, said his patient photograph at his Mission District clinic was duplicated under a second account created when the clinic switched electronic health record platforms in early 2025. For three months, two separate records in his name circulated in the system — one with his correct image, one without. He was billed under both. It took a formal complaint filed with the California Department of Managed Health Care before the clinic resolved the duplication.

What Residents Can Do Right Now

Consumer attorneys and digital rights advocates who work in the Bay Area point to several practical options for people caught in these situations. The California Consumer Privacy Act, in effect since January 1, 2020, gives residents the legal right to request access to all personal data a company or covered agency holds about them, including image files, and to demand correction of inaccurate records. Requests must be responded to within 45 days under the law. For city agency records specifically, the SF Department of Technology maintains a data correction request form through its sfgov.org portal, though processing times have stretched past 60 days for some residents, according to community members who described their experiences at the June library meeting.

The SF Digital Services team, which operates under the city's Chief Digital Services Officer, is the relevant office for escalation when agency-level corrections stall. Residents can also file complaints with the California Privacy Protection Agency, which has enforcement authority over CCPA violations.

For those dealing with platform-level image swaps — delivery apps, freelance marketplaces, social platforms — the CCPA deletion and correction rights apply to any company doing business in California with annual revenues above $25 million, regardless of where the company is headquartered. Screenshots, timestamped records, and written correspondence all help build a paper trail that speeds resolution.

Maria G. finally got her business profile corrected in May. She printed out the confirmation email and taped it to the wall behind her counter on Irving Street, just in case anyone asks.