Social networking sites leaking personal information to third parties, study warns