Invia SMS: Architectural Data Flow Analysis for Detecting Violations of Confidentiality Requirements