The firm apologises after an “experiment” activates settings remotely on some Android phones