Data-harvesting code in mobile apps sends user data to “Russia’s Google”