Researchers found vehicles in real-world settings contacted “third parties ... known to provide advertising and tracking services.”