COVID-19 apps


COVID-19 apps are mobile software applications that use Digital contact tracing in response to the COVID-19 pandemic, i.e. the process of identifying persons who may have been in contact with an infected individual.
Numerous applications were developed or proposed, with official government support in some territories and jurisdictions. Several frameworks for building contact tracing apps have been developed. Privacy concerns have been raised, especially about systems that are based on tracking the geographical location of app users.
Less intrusive alternatives include the use of Bluetooth signals to log a user's proximity to other cellphones. On 10 April 2020, Google and Apple jointly announced that they would integrate functionality to support such Bluetooth-based apps directly into their Android and iOS operating systems. India's Covid-19 tracking app Aarogya Setu became the world's fastest growing application beating Pokemon Go with 50 million users in the first 13 days of its release.

Rationale

Contact tracing is an important tool in infectious disease control, but as the number of cases rises time constraints make it more challenging to effectively control transmission. Digital contact tracing, especially if widely deployed, may be more effective than traditional methods of contact tracing. In a March 2020 model by the Oxford University Big Data Institute team of Professor Christophe Fraser, a coronavirus outbreak in a city of one million people is halted if 80% of all smartphone users take part in a tracking system; in the model, the elderly are still expected to self-isolate en masse, but individuals who are neither symptomatic nor elderly are exempt from isolation unless they receive an alert that they are at risk of carrying the disease. Some proponents advocate for legislation exempting certain COVID-19 apps from general privacy restrictions.

Issues

Uptake

, professor of security engineering at Cambridge University, listed a number of potential practical problems with app-based systems, including false positives and the potential lack of effectiveness if takeup of the app is limited to only a small fraction of the population. In Singapore, only one person in three downloaded the TraceTogether App by end-June 2020, despite legal requirements for most workers; the app was also underused due to the fact that it required users to keep the app open at all times on Apple iOS.
The proposed Google/Apple contact tracing plan intends to mitigate the take-up problem by incorporating the tracing mechanism in their device operating systems, distributed by standard software update mechanisms. By phase two, the operating system would be able to track exposure without the need to download a separate COVID-19 app.
A team at the University of Oxford simulated the effect of a contact tracing app on a city of 1 million. They estimated that if the app was used in conjunction with the shielding of over-70s, then 56% of the population would have to be using the app for it to suppress the virus. This would be equivalent to 80% of smartphone users in the United Kingdom. They found that the app could still slow the spread of the virus if fewer people downloaded it, with one infection being prevented for every one or two users.

App store restrictions

Addressing concerns about the spread of misleading or harmful apps, Apple, Google and Amazon set limits on which types of organizations could add coronavirus-related apps to its App Store, limiting them to only "official" or otherwise reputable organizations.

Privacy, discrimination and marginalisation concerns

Privacy campaigners voiced their concern regarding the implications of mass surveillance using coronavirus apps, in particular about whether surveillance infrastructure created to deal with the coronavirus pandemic will be dismantled once the threat has passed. American Civil Liberties Union has published a set of principles for technology-assisted contact tracing and Amnesty International and over 100 other organizations issued a statement calling for limits on this kind of surveillance. The organisations declared eight conditions on governmental projects:
  1. surveillance would have to be "lawful, necessary and proportionate";
  2. extensions of monitoring and surveillance would have to have sunset clauses;
  3. the use of data would have to be limited to COVID-19 purposes;
  4. data security and anonymity would have to be protected and shown to be protected based on evidence;
  5. digital surveillance would have to address the risk of exacerbating discrimination and marginalisation;
  6. any sharing of data with third parties would have to be defined in law;
  7. there would have to be safeguards against abuse and the rights of citizens to respond to abuses;
  8. "meaningful participation" by all "relevant stakeholders" would be required, including that of public health experts and marginalised groups.
The German Chaos Computer Club and Reporters Without Borders also issued checklists.
The proposed Google/Apple contact tracing plan intends to address the problem of persistent surveillance by removing the tracing mechanism from their device operating systems once it is no longer needed.
On 20 April 2020, it was reported that over 300 academics had signed a statement favouring decentralised proximity tracing applications over centralised models, given the difficulty in precluding centralised options being used "to enable unwarranted discrimination and surveillance." In a centralised model, a central database records the ID codes of meetings between users. In a decentralised model, this information is recorded on individual phones, with the role of the central database being limited to identifying phones by their ID code when an alert needs to be sent.
Human Rights Watch suggests that national mobile applications for COVID-19 contact tracing could potentially pose a serious threat to human rights.
In May 2020, it was reported that the authorities in Moscow wrongly fined hundreds of Moscovites for breaching self-quarantine. The dubious behavioral interpretations recorded by the social monitoring tracking application led to the mistaken fining of hundreds of people in Moscow.

Accuracy of proximity reports

According to ZDNet, Bluetooth-based proximity detection carries a risk of over-reporting interactions and leading to "a huge amount of false positives"; hypothetically, a system could flag an interaction with " person waiting for the bus on the side of the road". One problem is that using Bluetooth signal strength to infer distance can be unreliable; the range of a given Bluetooth device can vary due to the environment or the way the device is held. False positives could result in needless self-isolation, or could cause users to ignore warnings if the warnings are perceived as unreliable. GPS-based proximity detection can also be unreliable: according to the United States' GPS.gov, "GPS-enabled smartphones are typically accurate to within a 4.9 meter radius under open sky", with accuracy decreasing further in the presence of signal blockage. In contrast, social distancing guidelines are usually 2 m.
In the Google/Apple mechanism, a log entry is only added on the phone if Bluetooth proximity persists for five minutes. Logs are retained for 14 days. Bluetooth tracking is prone to false negatives; for example, unlike time-stamped GPS matching, Bluetooth cannot detect that a user has entered a possibly-infected space that an infected person has just left.

General approaches

Centralized contact tracing

Some countries used network-based location tracking instead of apps, eliminating both the need to download an app and the ability to avoid tracking. In Israel, network-based tracking was approved. Network-based solutions that have access to raw location data have significant potential privacy problems. However, not all systems with central servers need to have access to personal location data; a number of privacy-preserving systems have been created that use central servers only for intercommunication.
In South Korea, a non-app-based system was used to perform contact tracing. Instead of using a dedicated app, the system gathered tracking information from a variety of sources including mobile device tracking data and card transaction data, and combined these to generate notices via text messages to potentially-infected individuals. In addition to using this information to alert potential contacts, the government has also made the location information publicly available, something permitted because of far-reaching changes to information privacy laws after the MERS outbreak in that country. This information is available to the public via a number of apps and websites.
Countries including Germany considered using both centralized and privacy-preserving systems., the details had not yet been released.

Decentralized contact tracing

Privacy-preserving contact tracing is a well-established concept, with a substantial body of research literature dating back to at least 2013.
As of 7 April 2020, over a dozen expert groups were working on privacy-friendly solutions, such as using Bluetooth Low Energy to log a user's proximity to other cellphones. Users then receive a message if they've been in close contact with someone who has tested positive for COVID-19.
A group of European researchers, including from the Fraunhofer Heinrich Hertz Institute and École Polytechnique Fédérale de Lausanne, were under the umbrella of the Pan-European Privacy-Preserving Proximity Tracing project, developing a BLE-based app to serve this purpose that is designed to avoid the need for intrusive surveillance by the state. However, PEPP-PT is a co-ordination effort which contains both centralised and decentralised approaches. On April 17, 2020, EPFL and the ETH Zurich pulled out of the project, criticizing PEPP-PT for a lack of transparency and openness, and for not respecting personal privacy enough. Later it was reported that KU Leuven, the CISPA Helmholz Center for Information Security, the European Laboratory for Learning and Intelligent Systems and the Technical University of Denmark, also withdrew from the project. On April 26, 2020, Germany switched to decentralised approach to support solutions like DP-3T.
Decentralised protocols include Decentralized Privacy-Preserving Proximity Tracing, The Coalition Network's Whisper Tracing Protocol, the global TCN Coalition's TCN Protocol, and the MIT Media Lab's SafePaths. The goal of decentralization is to reduce the loss of privacy, by exchanging anonymous keys that do not include identifiable information.
COCOVID is being developed as a common effort of several European companies and institutions. The Mobile Application, the Big Data and the Artificial Intelligence components will be available to any government. The COCOVID app is Open Source and the backend is based on a highly scalable solution that is already used by several of the largest financial institutions in Europe. COCOVID will support the coordination of tests at medical institutions, allowing users with a high infection risk to book a test slot directly from the app. This will reduce the effort and increase the efficiency of the medical test processes. COCOVID will use both location and Bluetooth contact data, allowing a high level of effectiveness. The solution is designed following the EU data privacy recommendations.
The team working on the project includes persons from Orange, Ericsson, Proventa AG, Stratio, TH Köln and Charta digitale Vernetzung.
On 9 April 2020, the Singaporean government announced that it had open-sourced a reference implementation of the BlueTrace protocol used by its official government app.

Google / Apple Exposure Notification protocol

On 10 April 2020, Google and Apple, the companies that control the Android and iOS mobile platforms, announced an initiative for contact tracing, which they stated would preserve privacy, based on a combination of Bluetooth Low Energy technology and privacy-preserving cryptography. They also published specifications of the core technologies used in the system. According to Apple and Google, the system is intended to be rolled out in three stages:
Google and Apple plan to address the take-up and persistent surveillance problems by first distributing the system through operating system updates, and later removing it in the same way once the threat has passed.
The ACLU stated the Google and Apple's approach "appears to mitigate the worst privacy and centralization risks, but there is still room for improvement".
By 20 April 2020, Google and Apple described the systems as "Exposure Notification" rather than "contact tracing", stating the system should be "in service of broader contact tracing efforts by public health authorities". The name change was received positively by journalists in Vox/Recode and Salon, who stated "Exposure notification schemes like the Apple-Google system aren't true contact tracing systems because they don't allow public health authorities to identify people who have been exposed to infected individuals."

List of frameworks

List of countries with official contact tracing apps

;Australia
;Austria
;Azerbaijan
;Bahrain
;Bangladesh
;China
;Colombia
;Croatia
;Czech Republic
;Denmark
;France
;Germany
;Ghana
;Hungary
;Iceland
;India
;Ireland
;Israel
;Italy
;Japan
;Jordan
;Latvia
;Malaysia
;Nepal
;New Zealand
;North Macedonia
;Norway
;Qatar
;Saudi Arabia
;Singapore
;Spain
;Switzerland

Countries considering deployment

Centralized approaches

In the United Kingdom, Matthew Gould, chief executive of NHSX, the government body responsible for policy regarding technology in the NHS, said in late March 2020 that the organisation was looking seriously at an app that would alert people if they had recently been in contact with someone testing positive for the virus after scientists advising the government suggested it "could play a critical role" in limiting lockdowns. On 22 April, the government announced that alpha testing of a prototype of the app was in progress at RAF Leeming. Beta testing began on the Isle of Wight on 5 May for council staff and NHS workers before a wider rollout to all residents on 7 May. By 15 May, over 72,000 had downloaded the app, equivalent to more than half of the island's population.
On June 18, following reports that the app was only detecting 75% of contacts on Android devices and 4% of contacts on iPhones, the UK government announced that it would cease the development of its centralized system, and move to a decentralized system based on the Apple/Google Exposure Notification system.

Decentralized approaches

Both Australia and New Zealand are considering apps based on Singapore's TraceTogether app and BlueTrace protocol as of April 2020.
Many countries have announced the official development, trial or adoption of decentralized proximity tracing systems, where the matching of proximity encounters happens locally on individuals' devices, such as the Decentralized Privacy-Preserving Proximity Tracing protocol or the Google-Apple Exposure Notification API. These include Austria, Switzerland, Estonia, Latvia, Canada, Italy, Germany, Finland, the Netherlands, Ireland and Denmark.
In the United States, as of 10 June 2020, three states, Alabama, South Carolina, and North Dakota, have committed to using the Google-Apple Exposure Notification API. The U.S. state of Arizona is testing the Covid Watch app developed with the Apple/Google protocol. At least nineteen states have not yet decided, and at least seventeen other states stated there were no plans to use smartphone-based contact tracing.

Geofencing

intends to introduce a geofencing app for patients diagnosed with COVID-19 living in Moscow, designed to ensure they do not leave home.

List of apps by country

Note: This table should list only apps which are either supported by citations from third-party reliable sources, or are from, or supported by, independently notable organizations such as national governments, industrial collaborations, major universities or NGOs, or one of the framework collaborations listed above.
CountryNameFunctionalityPlatformAuthor/supporterStatusLicenceProtocolHomepageDownloadsRef
COVID-19 AOself diagnostic, information and quarantine enforcementWebRavelino de CastroProprietaryhttps://covid19ao.com/
Coronavirus Australiainformation, isolation registrationAndroid, iOSDelv Pty Ltd / Australian Department of Healthin useProprietary27/04, 1.89 million; 26/04: 1 million
COVIDSafecontact tracingAndroid, iOSAustralian Department of Healthin useProprietaryBlueTrace07/05, 4 million
contact tracing, medical reportingAndroid, iOSAustrian Red Crossin useApache License 2.0DP-3T
The Spread Projectcontact tracing, medical reportingAndroid, iOSManoel LemosAPK file releasedProprietary
COVID Alertcontact tracingAndroid, iOSShopify, Blackberry, Canadian Governmentin useApache License 2.0Google / Apple privacy-preserving tracing projecthttp://www.canada.ca/en/public-health/services/diseases/coronavirus-disease-covid-19/covid-alert.html
"Alipay Health Code"contact tracingAndroid, iOSintegrated into Alipay and WeChat appsProprietary
eRouškacontact tracingAndroid, iOSCzech Ministry of Health and Hygienein useMIT Licenseown
smitte|stopcontact tracingAndroid, iOSMinistry of Health in useProprietaryGoogle / Apple privacy-preserving tracing project
Ketjucontact tracingAndroid, iOS2M-IT, Futurice, Reaktor Finland, Fractal, Sitrasmall pilot test in MayunknownDP-3T
contact tracingAndroid, iOSGovernment of France / INRIA, ANNSI, Cap Gemini, Dassault Systèmes, INSERM, Lunabee studio, Orange, Santé publique France, Withings, Coalition Networkin use since 2 June 2020MPL-2.0 and ad hocROBERT
ROBERT contact tracingunknownINRIAPEPP-PT,
Stop Covidcontact tracingAndroid, iOSNovid20 / Georgian Ministry of Healthin useGPLPEPP-PT
Itocontact tracingAndroid like TUMAPK file releasedGPL3TCN
OHIOH Frameworkcontact tracing, scientific researchAndroid, OSFH Kiel]APK file releasedMITTCN
Corona-Warn-Appcontact tracingAndroid & AppleRobert Koch InstitutepublishedApache LicenseGoogle / Apple privacy-preserving tracing projecthttps://coronawarn.app/17/06: 6.5m, 18/06: 8m, 20/06: 10.6m, 25/06: 13.0m, 02/07: 14.4m
DOCANDU Covid Checkerself diagnostic, information and 24/7 online doctorAndroid, Web-based / Web-site WidgetDOCANDU, Region of Attica, Athens Medical Association in use https://www.docandu.com/en27/04, 18,000 users
GH COVID-19 Tracker AppAndroid, iOS: awaiting app store approvalsMinistry of Communication and Technology, Ministry of Health
Stay Home Safequarantine enforcementUnknownThe Government Of The Hong Kong Special Administrative RegionUnknown
VírusRadarcontact tracingAndroid, iOSMinistry of Innovation and Technology and NextSensein use https://virusradar.hu
Rakning C-19route trackingAndroid, IOSIceland's Department of Civil Protection and Emergency Management and Directorate of Healthin use MIT LicenseGPShttps://www.covid.is/app/en26/04, 50%
Aarogya Setucontact tracingAndroid, iOSUnion Government of India / National Informatics Centre
50million +
COVA Punjabcontact tracingAndroid, iOSGovernment of Punjab
COVID-19 FeedbackfeedbackAndroidUnion Ministry of Electronics and Information Technology / Union Ministry of Health and Family Welfare
COVID-19 Quarantine Monitorcontact tracing, geofencingTBAGovernment of Tamil Nadu / Pixxon AI Solutions
Corona KavachinformationAndroid Union Ministry of Electronics and Information Technology / Union Ministry of Health and Family Welfare
GoK DirectinformationAndroid, iOSGovernment of Kerala / Qkopy, MuseON Communications Proprietary
Mahakavachcontact tracingAndroidGovernment of Maharashtra
Quarantine Watchcontact tracingAndroidGovernment of Karnataka
Test Yourself Goaself diagnosticAndroidGovernment of Goa / Innovaccer
Trackcovid-19.orgself diagnostic, syndromic surveillanceWebTrackcovid-19.orgIn UseOpenhttps://www.trackcovid-19.org/NA
Test Yourself Puducherryself diagnosticAndroidGovernment of Puducherry / Innovaccer
PeduliLindungicontact tracingAndroid, AppleIndonesian Ministry of Communication and Information Technologyin use https://pedulilindungi.id/
contact tracing,
health info
Android, iOSin use
MIT LicenseBluetooth
Exposure Notification
https://covidtracker.gov.ie
https://github.com/HSEIreland/covid-tracker-app
Hamagen contact tracingAndroid, iOSIsraeli Health Ministryin use, open sourceMIT Licensehttps://govextra.gov.il/ministry-of-health/hamagen-app/download-en/
Covid Community AlertCovidApp for citizens, CovidDoc for doctors, web dashboard for epidemiologists Android, iOS, webCoronavirus Outbreak ControlReleasedOpen source, unclearTCNhttps://coronavirus-outbreak-control.github.io/web/
diAry “Digital Arianna”GPS location tracing, exposure notification, awareness raisingAndroid, iOSUniversity of Urbino / DIGIT srlReleased, open betaMIT LicenseGPS, ownhttps://covid19app.uniurb.it/
contact tracingAndroid, iOSPresidenza del Consiglio dei MinistriReleasedGNU AGPLv3Google / Apple privacy-preserving tracing projecthttps://www.immuni.italia.it/
SM-COVID-19Contact TracingAndroid, iOSSoftMiningReleasedClosed source, private specifications
COVID-19 Contact-Confirming ApplicationContact TracingAndroid, iOSReleasedProprietary
Core: MPL 2.0
Google / Apple privacy-preserving tracing projecthttps://www.mhlw.go.jp/stf/seisakunitsuite/bunya/cocoa_00138.html
AMAN Exposure DetectionAndroid, iOSJordan's Ministry of HealthReleasedGPS600,000
Apturi CovidExposure DetectionAndroid, iOSConsortium of volunteers, Ministry of Health of the Republic of LatviaReleased
Gerak Malaysiacontact tracing, border crossing registrationAndroid, iOSRoyal Malaysia Police / Ministry of HealthDiscontinued as of July 31, 2020Proprietary1 million
MySejahterainformationAndroid, iOSNational Security Council / Ministry of HealthIn useProprietaryQR code
MyTracecontact tracingAndroid, iOSMOSTIIn useProprietaryBluetooth
SELangkahContact tracingAndroid, iOSGovernment of SelangorIn use, integrated with MySejahtera and Maybank appProprietaryQR codehttps://www.selangkah.my/web/
Wiqaytna contact tracingAndroid, iOSMinistry of InteriorIn useGNU GPLv3 compatible with open source OpenTraceBluetooth
PrivateTracercontact tracingAndroid, iOSMilvum, YES!Delft, Odyssey, HagueMIT LicenceDP-3T
COVIRA Individual and regional risk assessmentwebScience HubIn useGNU GPLv3 compatible with open source OpenTrace
NZ COVID TracerPoint-of-interest journalAndroid, iOSMinistry of Healthin useProprietaryQR codehttps://tracing.covid19.govt.nz/May 20
StopKorona!contact tracingAndroid, iOSMinistry of Health, NextsenseProprietary
Smittestoppcontact tracing, route trackingAndroid, iOSSimula Research Laboratory / Norwegian Institute of Public Health in useProprietaryhttps://helsenorge.no/smittestoppApril 20, 1.2m
ProteGO Safecontact tracing, medical reporting, informationAndroid, iOSauthors: Jakub Lipinski, Karol Kostrzewa, Dariusz Aniszewski; supporter: Ministry of Digital Affairs of Polandin useGNU GPLv3 + GNU AGPLv3Google / Apple privacy-preserving tracing project
"Social Monitoring"contact tracingunder developmentInfogorod / Gaskar
Contact TracerDigital Contact Tracing and AlertingAndroidSoftTreehttps://contacttracer.ru
Corona MapSelf Diagnostic InformationAndroid, iOS, WebNational Health Information Centerin usehttps://coronamap.sa/
Tabaud - تباعدContact TracingiOSSaudi Data and Artificial Intelligence Authority in useGoogle / Apple privacy-preserving tracing project
TraceTogethercontact tracingAndroid, iOSGovernment Digital Services agency of Government Technology Agency of Singaporein usecompatible with open source OpenTrace / BlueTrace frameworkBlueTracehttps://www.tracetogether.gov.sg/18/06 2m, 15/5 1.4m, 27/4 1.1m, 9/4 1000k, 2/4 950k, 30/3 910k, 27/03 830k, 26/03 735k, 22/3 600k, 21/03 500k users
Corona 100mcontact tracingAndroid Bae Won-Seok / TINA3D
Self-Diagnosis appself-diagnosticAndroid, iOSMinistry of Health and Welfare
Self-Quarantine appisolation registrationAndroid, iOSMinistry of the Interior and Safety
Covi-IDcontact tracing, health credential managementAndroid, iOS, WebCouncil for Scientific and Industrial Research,University of Cape Town, The Delta Studioin usecompatible with open sourcePACT,GDPR,California Consumer Privacy Act, POPIhttps://coviid.me/
Radar COVIDcontact tracingAndroid, iOSMinistry of Economic Affairs and Digital Transformation, Indra SistemasAvailable in Play Store and App StoreDP-3T, Google / Apple privacy-preserving tracing project,
Self Shield Self-Health Checking and monitoring, AI driven breathing performance assessment, Quarantine Monitoring and Support, reporting test state, demographic mappingAndroidCommonwealth Centre for Digital HealthAvailable in Play StoreProprietaryhttps://sshield.org
contact tracingAndroid, iOSUbique, EPFL, ETH Zurichin useMPL 2.0DP-3T, Google / Apple privacy-preserving tracing projecthttps://github.com/DP-3T/dp3t-app-android-ch
COVID Symptom Study, formerly Covid Symptom Trackerself-diagnosticAndroid, iOSKing's College London, Guy's and St Thomas' Hospitals, Zoe Global Limitedhttps://covid.joinzoe.com/May 4, 3 million
NHS COVID-19multipurposeAndroid, iOSPivotal Software for NHSXMIT License
self-diagnosticWebApple Inc. / U.S. Federal Government
CovidSafeself-diagnostic, contact tracingAndroid, iOSMicrosoft volunteers, University of WashingtonMIT LicensePACThttps://covidsafe.cs.washington.edu/
Covid Watchexposure alerts / anonymous contact tracingAndroid, iOSCovid WatchpilotingApache 2.0Google / Apple privacy-preserving tracing project, TCN
coEpiself-reportingAndroid, iOScoEpiTCNhttps://www.coepi.org>
How We Feelself-diagnosticAndroid, iOSPinterest and others
NOVIDcontact tracingAndroid, iOS, CMUTCN
PreworkscreenEmployee pre-shift screening, reporting, and documentingAndroid, iOS, WebReleased on and Proprietary
Private Kit: Safe Pathscontact tracingAndroid, iOSMITMIT License
TeamSenseEmployee pre-shift symptom screening, reporting and compliance dashboardWebTeamSenseIn UseProprietaryhttps://www.teamsense.com
ProjectCovidself diagnostic, informationAndroid, iOSLFR InternationalReleasedhttps://project-covid.lfrinternational.org/
NCOVImedical reportingAndroid, iOSVNPT, Ministry of Health Vietnam
Proprietary
Bluezonecontact tracingAndroid, iOSMinistry of Health Vietnam
Available in Play StoreLicence
GNU License

globalWorld Health Organization COVID-19 AppinformationAndroid, iOSWorld Health Organizationunder developmentMIT Licence
globalCoalition Appcontact tracingAndroid, iOS, third party hardwareCoalition NetworkLiveGPL 3Whisper Tracing Protocolhttps://www.coalitionnetwork.org/