The company says phone makers created the insecure logs that a developer found. Device analysis suggests problem is limited to particular US carriers, and a free software detector can identify the presence of Carrier IQ's application