I'm guessing they used some framework and the libraries they used ask for a broad set of permissions because they offer access to their functions. But they're not necessarily used.
Also considering they're asking for a permission for a protocol that was shut down 7 years ago, the framework must be quite old. Android permissions were less granular back then.
I know someone in Germany and their covid tracking app tells you when and where you were close to someone who was last tested positive. So everyone does it the same way, recording location.
It only tells you on which day you had "one" or "multiple" contacts with "low" or "high" risk. It's Bluetooth based, and the CoronaWarnApp doesn't even access location data.
> I know someone in Germany and their covid tracking app tells you when and where you were close to someone who was last tested positive. So everyone does it the same way, recording location.
Not sure about Germany, but in France the app doesn't track location. It tracks nearby devices (with Bluetooth, rotating identifiers frequently), and when one marks oneself as positive, it informs the central server of the identifiers used in the last X days, which then other apps checks against their list of known identifiers that were close.
My friend was definitely told where he was on the last contact. Doesn't mean his location left the phone though.
[He didn't get Covid this time, but off topic for this discussion.]
Edit: or maybe it's on topic because the location was at some amusement park outdoors. Since he knew where and it was relatively safe, he didn't have to worry much about the test results...
> Also considering they're asking for a permission for a protocol that was shut down 7 years ago, the framework must be quite old. Android permissions were less granular back then.
That’s not how PlayStore permissions work. You have to target a certain Android version to release update apps and that version dictates how permissions work. You can’t get around those requirements by using an old framework.
Yeah, but old framework needed one permission that split into 3. Now it asks for all 3 permissions because they didn't hold to think that they only need 2 of them, and even those not always.
Also considering they're asking for a permission for a protocol that was shut down 7 years ago, the framework must be quite old. Android permissions were less granular back then.
I know someone in Germany and their covid tracking app tells you when and where you were close to someone who was last tested positive. So everyone does it the same way, recording location.