Sensor Tower secretly harvested user data with VPN and ad blocking apps