Surveillance firm sued for scraping Facebook and Instagram data