Virginia just launched the first contact tracing app using framework by Google and Apple. Gov. Northam's office told me as of Monday night, there's been 293,530 downloads. I took a look at its privacy and the attempts of Va. and other states to build public trust in the apps. /1

The framework used by Virginia, as well as at least 3 other states, is pretty privacy conscious, experts told me. It doesn't collect location data (read: the app doesn't follow you) and users are randomly assigned Bluetooth pins which interact with other random, anonymous pins.

If your pin has been in close proximity with another user's pin for > 15 mins & that other user has willingly inputted that they've tested positive for COVID-19, you'll get a notification that you've been exposed & given symptom/testing info.

So, how do you get people to use it?

App developers in Va. and three other states say education is key. Va. is about to launch a public health educational campaign on the app and its benefits. You can read more here on how states are balancing contact tracing apps privacy & public trust : https://bit.ly/3aeijvd 

One thing to be clear: Contact tracing apps are NOT regulated by HIPAA. Sure, contact tracing apps can follow HIPAA guidance on how and when to disclose and how to protect privacy, but they cannot be penalized under HIPAA for a breach.