Data security at health clubs and leisure centres could be at risk because staff are using unofficial channels such as Facebook and WhatsApp to communicate work-related issues, according to a new survey.