A new study shows how ChatGPT, Claude, Gemini & Co. share user data with third parties – sometimes even granting access to chat histories and sensitive info.