From telecom protocols to a 1.5 million row dataset, here’s how we uncovered the reach and tactics of a mercenary phone-tracking company