New study shows that the default apps collect data even when supposedly disabled, and this is hard to switch off