Social media and online video firms are conducting ‘vast surveillance’ on users, FTC finds