Covid testing firm ‘selling swabs carrying customers’ DNA’ to third parties