Democratic-led states secured a legal victory to keep the personal data of food recipients out of the federal government's reach. But NPR's reporting shows that millions of records on Americans have already been shared.