Americans’ personal data could be collected and stored overseas — even if they’ve never downloaded a foreign-developed app ...