Twelve of the largest drug stores in the U.S. sent shoppers’ sensitive health information to Facebook or other platforms.