A Utah investigation found educational apps collecting unauthorized student data and sharing information with third parties and advertisers.