Relevant quote from the FAQ doc: There will be restrictions on the data that apps can collect when using the API, including not being able to request access to location services, and restrictions on how data can be used.
NHS Covid-19 app update blocked for breaking Apple and Google's rules
61–64 of 64 posts
Re: NHS Covid-19 app update blocked for breaking Apple and Google's rules
#62Earlier quoted context omitted.
AFAIK in my jurisdiction the QR codes are a simple number, which the app reports along with the names of the people who have checked in or you are checking in. The number represents all the data that UK code is trying to convey. Not sure why the UK code needs all of that within itself rather than having a lookup table of some sort the number points to.
If the lookup table was stored on the server, requesting the data would effectively provide the user location to the central server. This is the part that isn't allowed. I suspect the lookup table is too big to store on the device itself.
Seems to me like a lot of these problems go away if governments stop making things more complicated than they need to be.
Re: NHS Covid-19 app update blocked for breaking Apple and Google's rules
#63Earlier quoted context omitted.
If the lookup table was stored on the server, requesting the data would effectively provide the user location to the central server. This is the part that isn't allowed. I suspect the lookup table is too big to store on the device itself.
Why would the app need to do a lookup? Store the numbers, and if/when you test positive then submit them along with your bluetooth keys. Seems to me like a lot of these problems go away if governments stop making things more complicated than they need to be.
If one of your user stories involves users being able to see the names/addresses of venue's they have visited, you will either need to store the venue name in the QR code or do a lookup.
Re: NHS Covid-19 app update blocked for breaking Apple and Google's rules
#64Earlier quoted context omitted.
In this specific case, I'm really glad they're exercising their power, because they seem to be doing it in the best possible way, and have forced governments to do the right, privacy-preserving thing. And I think having this power is OK - nobody should be forced to help the government implement something unethical. There may be scenarios where this goes horribly wrong, but the contact tracing framework is a case wher…
> nobody should be forced to help the government implement something unethical Nobody is forced to install the app at all (at least in the UK's case). And if they do, they're not forced to share their location anyway. On the other hand, anyone who has an Android phone is forced to share tons of data with Google. And the cost of not having one is much higher than the cost of not having the government's app.