Thread by @mygovindia

Read this thread to understand how privacy issues are taken care of by the @SetuAarogya App.

The App requires you to enter your mobile number & certain personal information at the time of registration. All this information submitted is securely encrypted and stored on the server

On registration, the App assigns you a unique, anonymised, randomly generated Device ID. The linking of device id to mobile number is one time, and is securely encrypted and stored in a server. All future interactions from device to server is done through device ID only.

No personal information is exchanged post the registration. Thus, all processing of contact tracing and risk assessment is done in an anonymised manner.

When you come in proximity of other people with this App installed, the App stores encrypted information of this interaction in a secure manner on your mobile only.

Information of your social interactions is NOT sent to the server in most cases, except when you have come in contact with someone who later has been diagnosed high risk or your self-assessment categorises you at risk.

Information of your social interactions is NOT sent to the server in most cases, except when you have come in contact with someone who later has been diagnosed high risk or your self-assessment categorises you at risk.

Government of India will use your information ONLY for administering necessary medical interventions. Your data is NOT going to be used for any other purpose. No third party has access to data.

The App never reveals the personal identity of anyone. The identity of COVID-19 patients is NOT shared with public at large.

All information on the mobile device is stored only for 30 days, post which such data is deleted. For all data stored on the server for non-risk users, data is deleted in 45 days. For at-risk patients, data is deleted in 60 days.

Your location data collected is also stored on your device only. The data is sent to the server only in the case you have tested COVID-19 positive or you are at high / moderate risk of infection.

Your location data is not used on individual level, is only used on aggregated level – that too only to identify hotspots and the direction of movement of infection.

Your location data, on an aggregated basis, will be used to identify the locations that need to be sanitised and where people need to be more deeply tested and identify emerging areas where infection outbreaks are likely to occur.