An iPhone device displays the CovidSafe app released by the Australian government on Tuesday, April 29, 2019. The app traces every person running the app who has been in contact with other app users who has tested positive for coronavirus in the previous few weeks. The automation of coronavirus contact tracing seeks to allow the easing of restrictions in Australia. (AAP Image/Dave Hunt) NO ARCHIVING

What it really means when “COVID-19 exposure notifications” is in your phone settings

AAP FactCheck June 12, 2020

The Statement

The presence of a piece of software on Android phones has resulted in Facebook posts claiming that the Australian government’s COVID-19 tracing app has been installed without permission.

A June 7 Facebook post claims: “Android users BEWARE, google [sic] automatically signed you up to COVID-19 tracing app.”

The post says Android phone users “may already have COVID-19 Exposure Notification [sic] already on your phone” and describes how they can check and turn the function off.

The post lists a series of steps: “1. Go to settings 2. Scroll down to Google Services and launch 3. If Covid-19 Exposure Notifications is on top of the list, then tap on the three dots on the top right hand corner of your screen. 4. Tap Usage & Diagnostics 5. Turn off”. It finishes by telling users to “check regularly in case the Android system turns this on automatically”.

AAP FactCheck has found three reposts, here, here and here. In total the posts have been viewed more than 85,000 times and been shared more than 1300 times.

Screenshot of Facebook post
 A widely shared post wrongly claims software on Android phones is the same as the COVIDSafe app. 

The Analysis

As COVID-19 spread around the world a number of national health authorities created smartphone apps to help track the spread of the virus.

Australia’s tracing app, COVIDSafe, was released in late April, 2020.

The app uses anonymised data gathered via Bluetooth to trace the contacts of confirmed cases of COVID-19. The federal Department of Health has urged people to download the app but it is not mandatory.

The June 7 Facebook post and others like it claim Google has “automatically” signed Android phone users up to COVIDSafe. It claims the presence of software called “COVID-19 Exposure Notification” in a phone’s settings is proof of this. This claim is false.

Google and Apple worked together to create the COVID-19 Exposure Notifications System.

Released On May 20, the system is an API, or Application Programming Interface. It is not an app. An API is an interface that defines how applications communicate with each other.

A joint statement from Google and Apple specifically notes that what the tech companies have built “‘is not an app”.

“Public health agencies will incorporate the API into their own apps that people install,” the statement says.

The COVID-19 Exposure Notifications API will “enable apps created by public health agencies to work more accurately, reliably and effectively across both Android phones and iPhones”, the statement says.

While the API can be used by public health authority tracing apps, the Australian COVID-19 contact tracing app, COVIDSafe, does not work with it. (See section: When will the Apple-Google API technology be available?”)

COVIDSafe is based on an approach that uses and shares information about contacts differently to the API. Under the COVIDSafe model, the anonymous “keys” that phones use to note the proximity of other phones are generated from a central server. The Google-Apple API generates the keys within each phone. There are also differences in how information about potential exposures to COVID-19 is shared and how notifications are sent.

University of Western Australia WA senior research fellow Dr David Glance told AAP FactCheck the API was included in recent system upgrades for Apple and Android phones but will only work in countries where health authorities have decided to use a compatible app.

For Australian health authorities to start using the API, they would have to completely change the design of the COVIDSafe app, he said.

“The API has absolutely nothing to do with the application,” Dr Glance said in a phone interview.

Dr Glance, from UWA’s Faculty of Engineering and Mathematical Sciences, said the post’s instructions are also misleading because they refer to settings for the usage and diagnostics that Google collects about apps such as running time and energy consumption. Taking the steps outlined has no effect on the exposure notifications API, he said.

“So the post is a complete fabrication which, if followed, simply switches off the ability for Google to receive diagnostics – note that this is off by default also and you need to consent to having it switched on,” Dr Glance said.

COVIDSafe app
 Australia’s COVIDSafe app is not related to Google-developed software found on Android phones. 

The Verdict

Based on the evidence, AAP FactCheck found the claims in the post to be false. Google has not signed Android phone users up to a COVID-19 tracing app. The Exposure Notifications System on both Android phones is an API that needs a compatible app to function. Australia’s COVIDSafe app does not work with the API.

False – The primary claims of the content are factually inaccurate.

AAP FactCheck is an accredited member of the International Fact-Checking Network. If you would like to support our independent, fact-based journalism, you can make a contribution to AAP here.

All information, text and images included on the AAP Websites is for personal use only and may not be re-written, copied, re-sold or re-distributed, framed, linked, shared onto social media or otherwise used whether for compensation of any kind or not, unless you have the prior written permission of AAP. For more information, please refer to our standard terms and conditions.