Arhaus allegedly used third-party operator Twilio to record and analyze private conversations without the customers’ permission, a violation of the California Invasion of Privacy Act.