Repair firms might be rifling through your personal data