That mental health app might share your data without telling you