KidSecurity’s user data compromised after app failed to set password