COVID-19 Contact Tracing Apps and Your Privacy

As COVID-19 cases rise, some people and government agencies are turning to contact tracing apps to help monitor the spread of the virus.
So how exactly does that work, and how much information do they get?
Carnegie Mellon University Professor Po-Shen Loh led a team developing NOVID, a contact tracing app designed to notify users when someone who self-reports testing positive for COVID-19 comes near them.
“As you’re walking around in public if you happen to be near somebody else who also has the app installed, the 2 apps communicate with each other through Bluetooth,” Loh said.
The NOVID app also uses ultrasound to improve accuracy. “We don’t just use only Bluetooth because it might accidentally miscategorize people as being together when they were separated by a wall,” Loh said.
The contact tracing app being developed in a joint effort by Google and Apple also uses Bluetooth, but neither uses GPS.
Both apps’ creators say the information collected remains anonymous.
“As soon as you install the app it generates random user ID that has nothing to do with you. It doesn’t tell your name or your phone number,” Loh said.
If you search contact tracing in the app store, a multitude of different apps some up, so you need to be careful what you download. Cybersecurity experts say to especially avoid the ones that use GPS.
“I’d be concerned about all the info that could be available for a hacker to get, personal info, location, where you’ve been, have you had a positive test for COVID-19, those are things that should be kept private,” said CRITICALSTART CEO Rob Davis.
Recent polls show 60% of Americans are wary about using these apps.
“There’s a lot of people because of distrust of government or Apple or Google and concerns about privacy are not using these apps,” Davis said.
Loh said more than 40,000 people have downloaded the NOVID app, and Pennsylvania’s State Health Department said it is working on an app to use the Apple-Google platform.
“The biggest problem is getting enough people to utilize these applications so the automatic contact tracing becomes useful,” Davis said.
Overcoming that hurdle will be necessary to make these apps truly effective.
Featured in WPIX-TV 11 | July 2, 2020
Stay Connected on Today’s Cyber Threat Landscape
RELATED RESOURCES
- News
CRITICALSTART aims to eliminate “acceptable risk” from cybersecurity’s vocabulary
CRITICALSTART, a leading and trusted provider of Managed Detection and Response (MDR) services to hu... - News
SMU Cox Dallas 100™ Names CRITICALSTART One of the Fastest Growing Privately Held Companies in Dallas Area
PLANO, TX, (February, 25 2020) – CRITICALSTART, a leading cybersecurity provider of Managed ... Data Sheet
The Financial Consequences of Risk Acceptance Security Strategies Whitepaper
CRITICALSTART reduces endpoint risk to levels unachievable by traditional Managed Detection and Resp...
RESOURCE CATEGORIES
-
- Consumer Education(39)
- Consumer Stories(2)
- Cybersecurity Consulting(10)
- Data Breaches(15)
- Data Privacy(43)
- Incident Response(9)
- Interview(51)
- MDR Services(64)
- MOBILESOC(9)
- News(4)
- Penetration Testing(16)
- Press Release(59)
- Research Report(9)
- Security Assessments(16)
- TEAMARES(17)
- Thought Leadership(17)
- Threat Hunting(9)
- Video(1)
- Vulnerability Disclosure(3)