Apple’s COVID-19 App and Privacy

Michael Potuck for 9to5Mac:

We’ve analyzed the app here at 9to5Mac and verified that it indeed does not send any data back to Apple or any third-parties, performing as Apple says it does.

Until iOS requires Shortcuts-style consent for each outbound request domain these kind of tests are important, but shouldn’t be limited to apps that legislators are skeptical of.

Unfortunately, most of the time the worst privacy violations has already been committed by the time a government agency launches an inquiry. So I would like to conclude my rant with a free startup idea: a network proxy that contributes to an aggregate map of apps to their outbound request domains.