California AG: Mobile apps should limit data collection