Thread by @logic

So #COVID19Vaccination has its own app - tech infra management - #CoWIN.#Thread to keep a watch on this. It is *as* important or even more important than @SetuAarogya app Page 45 of web.archive.org/web/2021010921… CoVID-19 Vaccine Intelligence Network (Co-WIN): The Digital Platform

High level overview of CoWIN- VIN operations.

cowin.gov.in/home - is the website and app.cowin.gov.in/home is the app backend for CoWIN beneficiary registration and AEFI management

https://twitter.com/logic/status/1350694241886879744

The #CowinApp is at play.google.com/store/apps/det… and #Maharashtra has already delayed vaccination by 2 days because of 'technical glitches' with the app theprint.in/india/governan…

web.archive.org/web/2021011708… - Note the word - permission / not consent. Lets get back to this in a bit

Govt to generate unique health IDs for people giving Aadhaar for vaccination
timesofindia.indiatimes.com/articleshow/80…

Back to the app - The #PrivacyPolicy of the #CowinApp is ndhm.gov.in/health_managem… - Why is Privacy policy of Vaccination app linked to national digital health missions' health data management policy ?

The said policy mentions "Voluntary" use of Aadhaar for creation of Health ID. Assuming this is the privacy policy of the app and going by various other communication from @MoHFW_INDIA - Aadhaar is one of the ID and not the only ID for vaccination.

But what happens you are one of those students under the age of 18 or those poor folks in rural India who have #Aadhaar as only ID Proof ?

The individual should still be provided option to create the health ID / not right ? That's what the policy above said no ?

The app description says - #Aadhaar Authentication is to ensure de-duplication.

If you have forgot Aadhaar lingo -
Authentication - gives only Yes / No response based on biometric / OTP / demographic input.
#eKYC - A copy of your personal data in #Aadhaar is shared to app

When you share #Aadhaar as a proof - the app (available with vaccine administrators) - will perform #Aadhaar biometric authentication (Also most of the said section of population might not have mobile phones as well) ... But is it doing biometric authentication (Yes/No) OR eKYC?

How do we know if any #Aadhaar biometric authentication call is #Auth / #eKYC ? From UIDAI's API documentation - 'wadh' parameter in PID block(where fingerprint is held) is the parameter that differentiates.

WADH should be empty for auth, filled for eKYC
uidai.gov.in/images/resourc…

When you reverse the #CowinApp you will see wadh parameter is 'hardcoded'.So @MoHFW_INDIA is doing #eKYC instead of plain authentication.This also is a mass bulk subsidy to @UIDAI which gets tax free money for each eKYC. MoHFW now has your data in #Aadhaar & can create #HealthID

Why does @MoHFW_INDIA not give option to people not to create #HealthID and 'hardcodes' wadh to make every authentication #eKYC ?

Because someone has taught them the way to 'hardcoding' fascism in code is far tougher to untangle than specifying in files

https://twitter.com/logic/status/1221717072939376640

This is not to say - don't get vaccinated. By all means do - but care about the your and others' personal health data now longitudinally collected WITHOUT your consent to create the #healthid by #CowinApp when there is no #DataProtectionLaw. Let that sink in. #

We will track the damn app - Thread

https://twitter.com/logic/status/1350804961433513992

Who is behind #CowinApp - @UNDP_India

Offering divoc.egov.org.in from @eGovFoundation here without comments. Do read up yourselves.