Flock vendors should face mandatory limits on retaining searchable vehicle-location records