Prison communication app exposes database with millions of records