Xinjiang authorities reportedly gather info like facial-recognition data, banking records, and home visits.