Internal CBP document confirms agency bought mobile advertising data to track phone locations, circumventing warrant requirements for surveillance.