At a moment when education technology firms are stockpiling sensitive information on millions of school children, safeguards for student data have broken down.