How a flashlight app illuminated modern smartphones’ privacy problems