Everything about AarogyaSetu app  | 26th April 2020

HOW DOES THE APP WORK?

• It is designed to keep track of other AarogyaSetu users that a person came in contact with, and alert him or her if any of the contacts tests positive for COVID-19.

• The app will keep a record of all other AarogyaSetu users that it detected nearby using Bluetooth, and also a GPS log of all the places that the device had been at 15-minute intervals.
• These records are stored on the phone till the time any user tests positive or declares symptoms of COVID-19 in a self-assessment survey in the app.
• In such cases, the records are uploaded to the servers.
• According to the privacy policy of the app, it gives users a colour coding of green and yellow based on their self-assessment.
• The data of users who fall in the yellow category are uploaded to the server, while that of those in the green category — purportedly the lower risk group — is retained in the app.

• When the Bluetooths of two AarogyaSetu users sniff each other out, this unique digital identity is exchanged along with the time and location of the meeting.
• When an app user tests positive, all unique digital identities in his or her records get an alert on the risk they face and instructions on self-isolation and next steps.

HAS IT BEEN EFFECTIVE?

• The AarogyaSetu app faces the same issue as every other contact tracing technology that has come up during the pandemic period — it is people dependent.
• It needs widespread usage and self-reporting to be effective.
• Given that any number of total users will be a subset of smartphone owners in India, and there are bound to be variations in the levels of self-reporting, the efficacy is not bulletproof.
• The terms of use of the app also say as much, distancing the government from any failure on the part of the app in correctly identifying COVID-19 patients.
• Jason Bay, the brain behind TraceTogether, a contact tracing app from Singapore which has been among the more successful ones, emphasised the point that “automated contact tracing is not a panacea”.
• TraceTogether’s developers worked closely and constantly with frontline health-care workers to make the app effective.

ARE THERE PRIVACY CONCERNS?

• First of all, the app exists in the privacy law vacuum that is India.
• With no legislation that spells out in detail how the online privacy of Indians is to be protected, AarogyaSetu users have little choice but to accept the privacy policy provided by the government.

• As per the policy, “persons carrying out medical and administrative interventions necessary in relation to COVID-19” will have access to the data.
• According to a working paper from the Internet Freedom Foundation, this “suggests interdepartmental exchanges of people’s personal information” and is “more excessive than countries like Singapore and even Israel”.
• Beyond the legal loopholes, there are technical loopholes as well.

• A better approach would be constantly-changing digital identification keys like what Google and Apple deploy in their joint contact tracing technology.
• The abundance of data collected is also potentially problematic.

• Other apps such as TraceTogether make do with Bluetooth.
• Another issue that forums such as the Internet Freedom Foundation and the Software Freedom Law Center have raised is that the AarogyaSetu app is something of a black box.
• There is no documentation publicly available on the app.
• The advocacy groups argue that there should be more transparency on the inner workings of an app that is being promoted by the government and which is asking for the personal details of millions of citizens.

HOW IS THE APPLE-GOOGLE PROJECT DIFFERENT?

• The two technology giants that had till date balked at the idea of offering integrations with each other’s operating systems, are now doing so, thanks to a global crisis.
• Android and iOS phones will be able to talk to each other via Bluetooth.
• While they are currently offering it built into government health-care apps, this facility may soon be baked into operating systems.
• This may mean that different health-care apps will also be able to speak to one another using this channel, ensuring wider reach.
• While Google and Apple have emphasised that consent would be required for this feature to track you, privacy concerns prevail here too.