The data DOES NOT SLIP unless the slave device, the SD card, is missing clock pulses. Is the SD card rated for 3.3v? I believe there is a pin on some of the SD cards to select 3.3 vs 5v. I have never worked with an SD card but have read about them and worked with a lot of other SPI devices.
You must solve this issue first adn then tackle the CPOL and CPHA issues. Both bits MUST be correct for it towork reliably. Study the data sheet diagram and DRAW OUT ON PAPER what you think a one byte waveform should look like. As I recall, the data sheet should have a pretty clear explanation on these bits and how they effect the waveforms.
Since your data is clocked into the card on the rising edge you must make sure the data is clocked out of the MCU on the falling edge.
Since your data is clocked out of the SD card on the falling edge, you have to make sure the data is clocked into the MCU on the rising edge.
Good Luck,
Peter House
CPOL and CPHA are used to match these edges.