McDonald's India delivery app 'leaks user data'

Data on 2.2 million users was easy to access using standard web queries, says security firm.