A popular flashlight Android app with an installed base of between 50 million and 100 million users has also been collecting personal data including location and device ID and sharing it with advertisers even for users who had opted out, the Federal Trade Commission found.