In your article: "Apple and Google insist that no data will be shared with public health authority apps, apart from two exceptions. "
I think this is very misleading. The first bit of information you mention is stored on the phone, the second bit is stored on Apple's or Google's servers and delivered to all the phones that are enrolled, but none if it is directly available to the application and none is available to public health authorities. The only thing that becomes available to the application is the fact that the phone running the application was too close to another phone running the application, whose owner declared themselves to be infected.
So there is nothing that is directly or indirectly accessible to anyone.
Biting the hand that feeds IT
