Fitness tracking devices may be sharing private information