Bose devices spy on user, sell customer data: lawsuit