Ad companies like Facebook and Google are usually on the front line of the digital privacy debate. But in a long-awaited report, the FTC took the heat off these familiar names and called instead for tougher supervision of lesser known firms that collect and sell consumer data.