COVID-19 testing service in US exposes patients’ photos, passports