A New York Times investigation shows how otherwise innocuous location data and tracking can be used to uncover a user’s identity.