It’s not just Strava, ‘fit leaking’ is a wider privacy problem for fitness companies