Security bugs in a popular phone-tracking app exposed users’ precise locations