The commission withdrew a Biden-era statement that treated health and fitness apps as covered by federal breach notification rules.