An array of new products monitors users’ brain waves using caps or headbands. That neural data has few privacy protections.