nic-delhi / AarogyaSetu_Android

Aarogya Setu Android app native code
https://www.aarogyasetu.gov.in/
Other
2.89k stars 1.96k forks source link

App sends GPS location to server when launched #533

Open doug-leith opened 3 years ago

doug-leith commented 3 years ago

Upon launch of the app the user's location is silently shared with the central server, with no dialogue or popup raised notifying the user of this or asking for their consent. This happens via a request to:

https://webapi.swaraksha.gov.in/ncv19/nearby-stats

The location is also silently shared via this request whenever the user navigates to the `Your Status'' page on the user interface. We recommend that the first time this request is made the user is explicitly informed and asked for their consent.