The NYC subway’s new tap-to-pay system has a hidden cost — rider data