A First Look at Privacy Analysis of COVID-19 Contact-Tracing Mobile Applications

Area of Science:

• Mobile computing
• Public health
• Cybersecurity

Background:

• Modern smartphones possess numerous sensors (e.g., GPS, Bluetooth, health trackers) enabling diverse applications.
• These sensors facilitate community sensing for disease tracing, as seen with COVID-19 contact tracing applications.
• The widespread use of these sensors in health applications raises significant privacy and security concerns.

Purpose of the Study:

• To analyze smartphone applications designed for COVID-19 tracing and control.
• To evaluate the necessity of permissions requested by these apps for tracking and tracing functionalities.
• To assess data transport mechanisms and security measures employed by these apps to safeguard user privacy.

Main Methods:

• Analysis of permissions required by a set of COVID-19 tracing smartphone applications.
• Examination of data transmission protocols from user devices to central analytic centers.
• Review of security implementations within these applications to ensure user data protection.

Main Results:

• Identified various permissions requested by COVID-19 apps, assessing their relevance to tracking functions.
• Investigated data handling procedures, including transport and storage.
• Evaluated the effectiveness of security measures in place to prevent unauthorized access and data breaches.

Conclusions:

• Smartphone sensor data offers valuable insights for public health initiatives like disease tracing.
• Careful consideration of app permissions and robust security protocols are crucial to mitigate privacy risks associated with health-tracking technologies.
• Ensuring data security and user privacy is paramount for the successful and ethical deployment of mobile health applications.