Privacy-Preserving Indoor Localization on Smartphones