One in four firms holding a test subject’s data released it to her partner without her permission.