The company acknowledges scanning the emails of Apps for Education users and faces allegations in a federal lawsuit that it built "surreptitious user profiles" for advertising purposes.