Ad targeting poses risks for users