NHS COVID-19 app update blocked by Apple, Google over location privacy fears An update for the NHS's COVID-19 test-and-trace app for England has been blocked by both Apple and Google because it added the ability for users to store and share location data. The arm of the National Health Service that developed the app signed an agreement with both tech giants that it would not gather location data …
I'm pretty confident that Google stores and shares my phones location data all the time. I suspect that the NHS would be able to do this if they told Apple and Google that they were just using it to send users a few COVID-19 advertisements every time they browsed the Internet or used other apps.
This is the confusing bit. From what is said, the CoViD app doesn't use the phone's location data - something everyone understands as "location data", it uses data the user has okayed the app to receive, namely the venue QR codes and that this update allows the user (to opt in?) to these being uploaded.
So on this basis any app for which Apple and Google doesn't have an appropriate agreement with, that uploads a person's: address, school, university, employer etc. (ie. anything that provides some form of location information) needs to be removed from their stores.
Only if they use the privacy-busting Covid-specific "who have you been nearby" API.
The Covid apps use an API Google/Apple created which allows the app to get data on other phones nearby. That data is clearly very sensitive and, in order to get maximum acceptance from users all over the world for this crisis, Google/Apple put very severe restrictions on any app which uses it.
Those restrictions mean that any app which wants access to this special "who has been nearby" API they are not allowed to use many other perfectly normal location APIs.
You can argue about whether those restrictions were necessary but I, for example, would not have downloaded the NHS app without those restrictions being in place. And the restrictions are very clear. There is nothing to stop governments having a second app which does not use that API but records other location data - which is what Scotland has done. I would not install that second app on my phone, however, just like I do not install many other apps which want location information.
That should be English, as the article says up here in Scotland we avoided that trap with a completely separate app which I have just installed, thanks El Reg!
The NHS Protect app is separate as well. We plugged into the API’s from the start. So all the expensive false starts in Englandshire did not happen up here.
It is really sad that at a time when even Google and Apple can pull together on an API, every country has invested in building their own apps, rather than make one that works across boarders. Not that I blame Scotland for steering well clear of this (very much not the NHS) NHS app.
Senior civil servants(*) understand technology in much the same way as Labrador dogs understand the Large Hadron Collider.
(*) The ones who make the decisions that the poor minions(**) have to try to implement.
(**) Who are younger and tend to have a better grasp. (But still not good.)
This post has been deleted by its author
"By tomorrow it'll be the EU's fault."
Unfortunately for Johnson and co. Brexit has shot that fox and now the government and its supporters are having to confect disagreements and rows with the EU so they can continue blaming someone else for their mistakes.
Like all authoritarian governments they have to have an external enemy or their grasp on the levers of power will be lost.
See also: Leopoldo Galtieri and the Falklands War to see how well that worked out.
Yeah, that was my first thought when the referendum was announced: the only reason people wanted to leave the EU was because the government had been using the EU as scapegoat for all its unpopular policies. What would the government do when that scapegoat had been killed?
Of course, the government didn't want the referendum result they got - they had shot themselves in the foot.
Of course, the government didn't want the referendum result they got - they had shot themselves in the foot.
But the simple way for the government to fix that was for the party controlling government to shuffle some bodies around and get the new set of lacklustre minds to announce that the government was now fully in agreement with the electorate and to make it clear that the footbullet incident was the ideal opportunity to replace the weak, fleshy, backward-looking foot with a brand spanking new bionic foot capable of leading the country into a bright and glorious future. Unicorns arise!
This is what will help. These tracking gimmicks are just another kind of surveillance pushed under the pretense of "fighting the pandemics". Tracking won't protect you from COVID-19 (or anything else, as a matter of fact). Yes, you may learn postfactum you might have gotten infected when you visited that brothel (or an opera). Does this help much?
Big brother aside, yes the apps can help. After my trip to the brothel, were I to get a notification I might decide to stay home and not go to the Opera, maybe not pop round to see Granny his weekend, or at least take a lateral flow test or two before going back in to work. So I break the chain of infection.
I'm not saying that the half hearted current English implementation of track and trace is going to do that. I am sure at least 50% of the people who originally downloaded the Covid app have since upgraded their phones and no longer have it loaded, but I'm sure the clear messaging, relentless TV adverts and the big billboards on the side of buildings and buses will remind them to reload it before drunkenly embracing their mates at the Dog and Duck.
Enjoy the end of this lockdown, see you all on zoom when we lock down again in June!
Governent funding for software seems to be on a "per unit produced " basis , like it was a tangible thing that needs a production line and raw materials for each instance.
Its like the beancounters havent grasped the difference between buying software and writing it.
There isn't. It probably was signed On Their Behalf by some faceless functionary.
People have pointed out that there were problems with the whole plan to begin with... Most people ignore the instructions to scan themselves into a venue, and given that the NHS app didn't allow for checkouts (i.e. 'I've been here only for 30 minutes', so I'll scan myself out), a lot of people just didn't bother because they were concerned they'd be caught out by positives being traced to a location they'd been in hours before the infected person.
I like NHS Scotland's idea of a separate app, but even then, I have problems with the trackability of individuals (albeit anonymised).
@anothercynic
"...I have problems with the trackability of individuals (albeit anonymised)...."
I don't think that anyone with your handle (do we still call them "handles") actually believes that we're not being tracked everywhere by these devices anyway. It's best to treat it as the price you have to pay for the features and convenience of having a pocket computer.
Is it still iOS 13 and above only?
Apple backported their “exposure” API into older versions of iOS. Yet UK government continues to build the app only for the latest iOS.
My attempts to “report a technical issue” reliably result in a link to the “what phones our app supports” web page.
Another page in the book of UK Gov’s total incompetence with tech.
Does it matter?
The number of people using this app is do low, that it does not matter if it works at all.
The very idea of this App was flawed in the first place. It is useless in the U.K. and it is useless in any other countries.
It can only work in those countries that can get away with apps that specifically designed to send the government your gps location linked to your identity and the police checks if you have the phone with you all the time.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
