Students' personal data is being collected by third-party vendors, says dad who has filed civil rights violation complaint against the district.