More than 50 million users were left in the dark about how Brightest Flashlight shared their location and device information with third parties.