NaMo app found leaking user data to US firm