A preliminary FTC study showed how firms use your data to set personalized prices. Here's how surveillance pricing works and why states are split on it.