Log in

Tech privacy firm warns contact tracing app violates policy

Posted on Friday, May 22nd, 2020 By Stephen Groves, Associated Press

The Care19 app is seen on a cell phone screen, Friday, May 22, 2020, in Sioux Falls, S.D. Care19, a contact tracing app is being pushed by the governors of North Dakota and South Dakota as a tool to trace exposure to the coronavirus. But tech firm Jumbo Privacy points out the app violated its own privacy policy by sharing location and identification information with third-party companies like Foursquare, BugFender and Google. (AP Photo/Stephen Groves)

SIOUX FALLS, S.D. (AP) — A contact tracing app pushed by the governors of North Dakota and South Dakota as a tool to trace exposure to the coronavirus violated its own privacy policy by sharing location and user identification information with third-party businesses, according to a report from a tech privacy company.

The Care19 app, developed by ProudCrowd, of North Dakota, was one of the first contact tracing apps endorsed by state governments in response to the coronavirus. Governors from both states promoted it as a way to help health officials stop outbreaks and retrace the steps of people with infections, while assuring people that their data is protected. But tech privacy company Jumbo Privacy reported this week that developers included lines of code that send users' location and identification data to third-party companies including Foursquare, BugFender and Google.

Concerned citizens have been eyeing the tradeoff between controlling outbreaks using apps and intrusions on privacy. Civil liberty groups and tech watchdogs have warned about contact tracing apps, saying governments and companies should not be able to access personal data.

The Care19 app shared location data with Foursquare, an advertising company that markets to people based on their location.

ProudCrowd CEO Tim Brookins said his company sends data to Foursquare to determine which businesses a user has visited, but the data is discarded and not used for commercial purposes.

"The simple overarching fact here is that we have stated, and Foursquare has confirmed, that they have not, nor will not, collect data from Care19 users. Period,” Brookins said.

The app generates an anonymous code for every user. The Jumbo Privacy report noted that the code, along with the phone's identification, was sent to BugFender, a Barcelona-based company that helps developers track malfunctions. The app also sent an advertising identifier linked with the user's phone to Google's Firebase service. That adds up to “serious privacy risks,” Jumbo said.

“It’s really an oversight from them,” said Jumbo Privacy CEO Pierre Valade. “It’s not a bad intention. They were rushing to build this product.”

Until Friday, Care19′s privacy statement told users their location data would “not be shared with anyone, including government entities or third parties, unless you consent or ProudCrowd is compelled under federal regulations.”

A revised statement says third parties "may have temporary access to aspects of your data for their specific data processing tasks. However, they will not collect this data in a form that allows themselves or others to access or otherwise use this data.”

South Dakota Secretary of Health Kim Malsam-Rysdon said the Care19 app doesn’t violate the privacy statement and that users always had to grant permission for the app to use their data. The South Dakota version of the app has been downloaded more than 18,000 times, but hasn’t been used to trace an active infection yet.

“This is a voluntary, opt-in app,” she said.

North Dakota Republican Gov. Doug Burgum said in a statement that the app, which has over 33,000 downloads in his state, does not use names, addresses or other personal information.

“The anonymous information Care19 is gathering can save lives, and smartly and safely using technology is one more way to help us speed up our economy recovery," he said.

8 Stocks Under $10 and On Sale Right Now

During times of market volatility, investors are looking to get return anywhere they can. One approach is to find cheap stocks (i.e. stocks that trade for less than $10). It’s not surprising that many of the cheap stocks can be found on Robinhood. This trading app is popular among millennial investors. And those investors are willing to speculate on cheap stocks.

And it’s easy to see why. Buying 100 shares of a stock that is trading for $5 can seem to be a wise investment if the stock moves higher. After all, if the stock price increases just $1, investors can see a 20% gain.

But that is not always the case. In fact, it’s not usually the case. The trap that some investors fall into is believing that these stocks can be the next Amazon or Apple. And while they do offer a potential reward, they also carry significant risk. It’s important to remember that when a stock is selling for less than $10, there’s usually a reason. And in some cases, it means the stock is under selling pressure.

This is one time when it’s important to remember that inexpensive does not necessarily mean the stock is a good value. However, there are some quality stocks that can be found in the bargain bin. And for many of these stocks, the value is found in a solid dividend that can reward income investors.

View the "8 Stocks Under $10 and On Sale Right Now".

Enter your email address below to receive a concise daily summary of analysts' upgrades, downgrades and new coverage with MarketBeat.com's FREE daily email newsletter.