Some virtual care companies putting patient data at risk, new study finds