Security hole in HTC phones gives up e-mail addresses, location