Contact Tracing/Exposure Notification SurveyInformation gathered from this survey will be used to better inform decision makers in state and local government, technologists, and the public, about the privacy and security features of leading contact tracing and exposure notification applications.
...
Briefly describe the ways in which your application's architecture is centralized or decentralized?
Your answer
Does imputed data reside on a user's device or on a server?
User's device
Your server
A third party server
...
Do user IDs reside on their respective devices or on a server?
User's device
Your server
A third party server
...
Central server controlled by our organization
Central server controlled by a third-party organization
Other:
When consenting to use your application, are users informed as to the nature of the information they're disclosing?
Yes
No
When consenting to use your application, are users informed as to how the information they're disclosing is being used?
Yes
No
When consenting to use your application, are users informed as to the likely impacts of disclosure and use?
Yes
No
Are events impacting the company server visible to users?
Yes
No
How do users opt-in or opt-out of being tracked by your application?
Your answer
Does your application have a privacy policy? If so, please provide the link.
Your answer
Does your application output aggregate data analysis?
Yes
No
If you answered yes to the above, do you apply differential privacy to this analysis?
...
Do you use data collected through your application for anything other than the health objectives related to mitigating the impact of COVID-19?
Yes
No
If your application is open-source, what license do you use?
Your answer
How is your organization structured? *
For-profit
Non-profit
Unincorporated / Research Organization
...
What steps have you taken to ensure that subpopulations are not systematically excluded from using, or being accounted for in, your application?
Your answer
What steps have you taken to ensure that your clients (including government) only use the information for pre-determined health objectives related to mitigating the impact of COVID-19?
Your answer
Does your application use an openly published protocol to ensure that their solution is verifiable and interoperable? (For example, DP^3T, PACT, the TCN Protocol, and Apple/Google COVID-19 contact tracing technology)
Yes
No
Other:
Can information such as location history, symptom reports, demographic information, or similar shared with public health officials or researchers, be linked back to or used to re-identify individuals (even by entities legally allowed to perform such linkage)
Yes
No
Other:
Is there anything else you'd like to flag regarding your application that we have not covered in this survey?
Your answer
Thank you very much for completing the survey! We greatly appreciate it!
...