Identity crisis: Lawsuit alleges tech company violated privacy laws by reselling client data