Investigation shines light on social media’s insidious child data harvesting