Lookout Inc., a mobile-phone security firm, scanned nearly 300,000 free applications for Apple Inc.s iPhone and phones built around Google Inc.s Android software. It found that many of them secretly pull sensitive data off users' phones and ship them off to third parties without notification.