US bulk phone data collection ruled 'illegal'