A Consumer Reports investigation finds U.S. automakers track and sell driving data without most drivers' knowledge.