How phone companies and bounty hunters reportedly exploited a secret 911 database to track users' locations