Apple and Google Reveal How COVID-19 Exposure Notification Apps Will Function
Apple and Google today are providing public health authorities around the world with new resources to help them make COVID-19 exposure notification apps, including sample user interfaces and sample code for iOS and Android.
iOS 13.5 will include a new menu in Settings > Health > COVID-19 Exposure Logging that indicates which public health authority app a user is using, in addition to showing the number of times that a user's exposure log has been checked in the past 14 days.
If a user is potentially exposed to COVID-19, they would receive a push notification from the public health authority's app.
Here's what the app could display when a user goes to report a positive COVID-19 diagnosis:
Apple and Google today also shared a list of requirements that all developers of apps that use their Exposure Notifications API must adhere to:
- Apps must be created by or for a government public health authority and they can only be used for COVID-19 response efforts.
- Apps must require users to consent before the app can use the API.
- Apps must require users to consent before sharing a positive test result with the public health authority.
- Apps should only collect the minimum amount of data necessary and can only use that data for COVID-19 response efforts. All other uses of user data, including targeting advertising, is not permitted.
- Apps are prohibited from seeking permission to access Location Services.
- Use of the API will be restricted to one app per country to promote high user adoption and avoid fragmentation. If a country has opted for a regional or state approach, Apple and Google are prepared to support those authorities.
Last week, Apple seeded the third beta of iOS 13.5 with the code needed to run apps built using the Exposure Notifications API, and it continues to target mid-May for a public release of the software update. Apple also released the first beta of Xcode 11.5 with a new version of the iOS SDK incorporating the API.
Apple and Google said their API is just one component of the broader efforts that public health authorities are undertaking worldwide to help curb the pandemic, including testing, traditional contact tracing, and containment.