Apple's cloud service held browsing data for more than a year after users had deleted it, find researchers