A huge challenge here is that public health experts and "cipherpunk" computer security communities think about privacy in very different ways. But for high levels of adoption, these apps need the confidence and backing of both groups.

PS -- @DTA and @MaddocksLawyers, please update the privacy policy & impact statement to say whether & how long you retain IP address logs for. Those are location data too ;)