Defender of your Digital Freedom

All Posts | May 15,2020

Comparative Study of Contact Tracing Application Across the World

Comparative Study of Contact Tracing Application Across the World

We studied contact tracing applications developed by 9 countries on certain parameters. All these applications have been launched and developed by their respective state entities except for Norway whose application has been developed in public private collaboration.

S. No.ApplicationLaunched ByDeveloperNatureCentralised/ DecentralisedCompatible HardwareSource CodeSunset ClauseData Retention PeriodData CollectionRevocation of Consent to Collect DataFunctionalityBluetooth/ GPS
1.TraceTogetherSingaporeSingapore Government Digital ServicesVoluntaryCentralisedAndroid & iOSOpenUsers will be prompted to disable its functionality or uninstall it when contact tracing ceases. However, no specific sunset data has been provided.21 days (in case the user has not come in contact with a COVID-19 case)Mobile Number and a random anonymised user ID. However, anonymised data is collected about user’s device and app for improving the user experience. It does not collect user’s location data.Allows revocation of consent. Data collected is then deleted from the government server.COVID-19 Contact TracingBluetooth
2.Stopp CoronaAustriaAustrian Red CrossVoluntaryDecentralisedAndroid & iOSOpenEnd of pandemic.i. Metadata: 14 daysii. Data of suspected cases:30 daysiii. Data on device for digital handshake with intensive contacts: 7 daysNo personal data collected unless tested positiveUn-installation or withdrawal shall amount to withdrawal of consent. Allows for partial withdrawal by deactivating the automatic “digital handshake”.Medical reporting, COVID-19 contact tracingBluetooth
3.Aarogya SetuIndiaNIC eGov Mobile AppVoluntary (best effort basis)CentralisedAndroid & iOSClosed-i. If user has not come in contact with any COVID-19 positive user: 30 daysii. If user has come in contact with any COVID-19 positive user: 45 days;iii. If tested positive for COVID-19: 60 days after such person has been declared cured of COVID-19.User’s location details, age, name, sex, phone number, profession, and travel history of last 30 days.Does not provide the option of withdrawing consent for data collection. Instead, it provides that a registered user may remove registration information supplied. At one place, privacy policy states that all personal information collected at time of registration will be retained as long as user’s account remains in existence and for such period thereafter. However, there is no provision for account deletion.Medical reporting, COVID-19 contact tracing, Telemedicine consultationsBluetooth & GPS
4.CovidSafeAustraliaAustralian Department of HealthVoluntaryDecentralisedAndroid and iOSOpenEnd of Pandemic21 days;The data, however, is stored on Amazon Web Services servers.Name, mobile number, postcode, age range.On un-installation, all COVIDSafe app information will be deleted from phone. However, information stored in the secure information storage system will be destroyed at the end of pandemic. The users are also given an option to delete their information from the storage system before the end of pandemic.COVID-19 contact tracingBluetooth
5.CoronAppColombiaNational Institute of HealthVoluntary (users installing CoronApp will get access to free internet)C entralisedAndroid and iOSOpen, however,code not published yet.--Collects public, semi-private, private, and sensitive data from users; information sought at the time of registration includes name, sex, date of birth, ethnicity, and email.-Medical reporting, COVID-19 contact tracingBluetooth & GPS
6.Hamagen (‘The Shield’)IsraelMinistry of HealthVoluntaryDecentralisedAndroid and iOSOpen--Location (on user’s device) and it is cross-referenced with the Ministry of Health’s epidemiological data.Not available as information is stored in user’s device.COVID-19 contact tracingGPS
7.SmittestoppNorwayPublic-Private, The National Institute of Public Health and SimulaVoluntaryC entralisedAndroid and iOSClosedDecember 1, 2020.30 daysMobile number, age, GPS location, operating system, mobile operator, version number, phone model, Bluetooth data.Allows user to delete its personal information any time. The function for this has been provided in the App. Such information will be deleted both centrally and from the device.COVID-19 contact tracing, route trackingBluetooth & GPS
8.eRouska (‘eFacemask’)Czech RepublicMinistry of HealthVoluntaryDecentralisedAndroid.Open-30 days.If user agrees to send data from phone to server, it will retained for 12 hours. Mobile number, however, is stored for 6 months or as ascertained by the Ministry of Health.Does not track or collect information about location. Information is stored in user’s device. However, it requires a phone number for registrationAllows user to delete its data anytime from its device as well as the server of hygienists. The phone number can also be deleted. However, the ID number assigned to the user is recorded.COVID-19 contact tracingBluetooth
9StopKorona!North MacedoniaMinistry of Information Society and Administration SocialVoluntaryDecentralisedAndroid & iOS.Closed-14 daysMobile number, unique random code-COVID-19 contact tracingBluetooth