Smart Nation Initiative Minister in charge, Vivian Balakrishnan announced that the trace together program will be stood down and all the data collected under the program would be deleted after the pandemic ends to maintains people’s privacy and government’s transparency. He reiterated that the sole purpose of the program was for contact tracing and to break the chains of COVID – 19 transmission. He added that the Ministry of Health might want to retain the epidemiological data for research purposes, but it will all be anonymised.
The government has also issued the procedure that will be in place to request deletion of data from the Trace Together app and tokens. When signing up for TraceTogether, a random user ID (a string of numbers and letters) is generated and linked to the user’s contact number and identification details, such as his name and NRIC number. These details are stored in a secure server, according to the TraceTogether website.
The Ministry of Health (MOH) uses the identification details to contact the right person when necessary. When the app or token users are near one another, their user IDs are exchanged in an encrypted and randomised form and can be decrypted only by MOH. The encrypted Bluetooth data exchanged is stored in the app or token, and does not contain personal, identifiable information. Bluetooth data older than 25 days is also erased automatically. Only when a user tests positive for Covid-19 will MOH request that he upload the Bluetooth data to the government’s servers for tracing close contacts.
The app also collects anonymised information about a user’s phone and app, such as the phone model and app version, to help the government improve the app and provide a better user experience. This data does not have personal, identifiable information. No global positioning system location data is collected. The Android version of the app needs “location permission” from the user because Android requires apps requesting Bluetooth access to also get permission to access the user’s location information.
Users can also request for their identification data to be deleted from the government’s server unless they are confirmed Covid-19 cases and their proximity data – or information about people near them – has already been uploaded to the government’s server.
For a user of the TraceTogether app, he can make the deletion request by e-mailing support@tracetogether.gov.sg with the mobile number he registered in the app.
For a user of the TraceTogether token, he can return the physical token to the government by first e-mailing support@tracetogether.gov.sg with the last four characters of his NRIC, FIN or passport number. The government will then let him know how to return the token.
When the request is received and can be made, the government will delete the user’s contact or mobile number, identification details and random user ID from its server. Once the deletion is completed, the data that the user’s device has exchanged with other users’ devices becomes meaningless because that data is no longer linked to the user.
When the nation fully recovers from the pandemic and there is no need to track and trace citizens to avoid the risk of infection, they will be prompted to disable the app or return or throw the token away.
