Browser extensions and phone apps used by a combined 11 million people are recording users’ complete browsing history, a clear violation of privacy.