The fitness app's maker said it found a bug in its Android version that was dribbling location data to an ad service in the US.