23andMe is potentially selling more than just genetic data – the personal survey info it collected is just as much a privacy problem