In a settlement with the FTC, the company said it wouldn’t mislead users about the security of their data.