NSO used real people’s location data to pitch its contact-tracing tech, researchers say