The fast-growing market of non-invasive neurotechnology is collecting people’s neural data without clear guidelines.