Many of my friends have social media accounts (Instagram, Facebook, etc.) where they regularly post photos of them and where occasionally I appear in them.
Many of my friends have their personal assistance in their phones that is constantly hearing what happens in the vicinity of the phone. Sometimes, since they are my friends, these apps record my voice and process it.
I never consented to these companies to process and store my data, only my friends allowed it. However there is little doubt that these companies also have all these information about me, my facial expression, my voice signature, and many other personal information.
I have two questions: Is this permissible under EU private data law? Can I sue these companies for illegally storing so much information about me?
How can I prevent that such companies have so much information about me?