Popular Shopify app exposes private data of thousands of shoppers