Google 'flaw' puts users' details on display