Original author(s) | NHSX |
---|---|
Initial release | 24 September 2020 |
Final release | 6.0 / 24 April 2023 |
Repository | |
Platform | Android, iOS |
Size | 9.8 MB |
Available in | English, Welsh |
Type | Contact tracing app |
License | MIT |
Website | covid19 |
NHS COVID-19 was a voluntary contact tracing app for monitoring the spread of the COVID-19 pandemic in England and Wales, in use from 24 September 2020 until 27 April 2023. [1] It was available for Android and iOS smartphones, and could be used by anyone aged 16 or over. [2]
Two versions of the app were created. The first was commissioned by NHSX and developed by the Pivotal division of American software company VMware. A pilot deployment began in May 2020, but on 18 June development of the app was abandoned in favour of a second design using the Apple/Google Exposure Notification system. Scotland and Northern Ireland had separate contact tracing apps.
A 2023 study estimated that in its first year of use, the app's contact tracing function prevented an estimated 1 million cases, and 9,600 deaths. [3]
The app allowed users to:
At first, "close contact" was defined as being within 2 metres for 15 minutes, or within 4 metres for a longer time. [12] These time durations were reduced from 29 October 2020, to as little as three minutes when the other person is at their most infectious, i.e. soon after they begin showing symptoms. [13] [14]
The Android app was coded in Kotlin, and the iOS app in Swift. The backend used Java and is deployed to Amazon Web Services using Terraform. [15] The code of the app and back-end is open-source and available on GitHub. [16]
The app was part of the UK's test and trace programme which was chaired by Dido Harding; from 12 May 2020 Tom Riordan, chief executive of Leeds City Council, led the tracing effort. [17]
In March 2020, NHSX commissioned a contact tracing app to monitor the spread in the United Kingdom of the coronavirus disease 2019 (COVID-19) in the 2020 pandemic, [18] developed by the Pivotal division of American software company VMware. [19] The app used a centralised approach, in contrast to the Google / Apple contact tracing project. NHSX consulted ethicists and GCHQ's National Cyber Security Centre (NCSC) about the privacy aspects. [20] [21]
The app recorded the make and model of the phone and asked the user for their postcode area. It generated a unique installation identification number and also a daily identification number. It then used Bluetooth Low Energy (BLE) to record the daily identification number of other users nearby. [22] [23]
If a user was unwell, they could tell the app about symptoms which are characteristic of COVID-19, such as a fever and cough. These details were then passed to a central NHS server. This would assess the information and notify other users that have been in contact, giving them appropriate advice such as physical distancing. The NHS would also arrange for a swab test of the unwell user and the outcome would determine further notifications to contacts: if the test confirmed infection with COVID-19, the contacts would be asked to isolate. [22]
By June 2020, £11.8 million had been spent on the app; [24] in 2020–21, £35 million was spent on the app. [25]
The first public trial of the app began on the Isle of Wight on 5 May 2020 [20] and by 11 May it had been downloaded 55,000 times. [26]
When the first national contact tracing schemes were launched – Test, Trace, Protect in Wales on 13 May, then on 28 May NHS Test and Trace in England, and Test and Protect in Scotland – the app was not ready to be included. [27] Replying to a question at the government's daily briefing on 8 June, Hancock was unable to give a date for rollout of the app in England, saying it would be brought in "when it's right to do so". [28] On 17 June, Lord Bethell, junior minister for Innovation at the Department of Health and Social Care, said "we're seeking to get something going before the winter ... it isn't a priority for us at the moment". [29]
On 18 June, Health Secretary Matt Hancock announced development would switch to the Apple/Google system after admitting that Apple's restrictions on usage of Bluetooth prevented the app from working effectively. [30] At the same press briefing Dido Harding, leader of the UK's test and trace programme, said "What we've done in really rigorously testing both our own Covid-19 app and the Google-Apple version is demonstrate that none of them are working sufficiently well enough to be actually reliable to determine whether any of us should self-isolate for two weeks [and] that's true across the world". [30]
The first, ultimately rejected, version of the app was subject to privacy concerns, the government backtracking on initial statements that the data collected from the app would not be shared outside the NHS. [31] Matthew Gould, CEO of NHSX, the government department responsible for the app, said the data would be accessible to other organisations, but did not disclose which. [32] Data collected would not necessarily be anonymised [33] [34] and would be held in a centralised repository. [35] [36] Over 150 of the UK's security and privacy experts warned the app's data could be used by 'a bad actor (state, private sector, or hacker)' to spy on citizens. [33] [37] Fears were discussed by the House of Commons' Human Rights Select Committee about plans for the app to record user location data. [38] Parliament's Joint Committee on Human Rights said this version of the app should not be released without proper privacy protections.[ citation needed ]
The second version of the app, released nationwide, addressed these concerns by employing a decentralised framework, the Apple/Google Exposure Notification system. Under this system, users remain pseudonymous: a person diagnosed with COVID-19 does not know which people are informed about an encounter, and contacted persons do not receive any information about the person diagnosed with COVID-19.
The functionality of the app was also questioned in late April and early May 2020, as the software's use of Bluetooth required the app to be constantly running, meaning users could not use other apps or lock their device if the app was to function properly. [39] The developers of the app were said to have found a way of working around this restriction. [40]
Faculty – a company linked to Cambridge Analytica – provided research and modelling to NHSX in support of the response to the pandemic. Palantir, also linked to Cambridge Analytica, provided their data management platform. These contracts began in February and March respectively. [41] [42]
As outlined on cancellation of the first app on 18 June 2020, the Department of Health and Social Care published on 30 July a brief description of the "next phase" app. Users would be able to scan a QR code at venues they visit, and later be notified if they had visited a place which was the source of a number of infections; the app would also assist with identifying symptoms and ordering a test. By using the Exposure Notification system from Apple and Google, personal data would be decentralised. [43] Zuhlke Engineering Ltd, the UK branch of Swiss-based Zühlke Group, used 70 staff to complete the development of the app in 12 weeks. [44]
Zuhlke Engineering was awarded "Development Team of the Year" title at UK IT Industry awards in November 2021 for development of NHS COVID-19 application. [45] [46]
Testing of the app by NHS volunteer responders, and selected residents of the Isle of Wight and the London Borough of Newham, began around 13 August. [47] [48] The app was made available to the public (aged 16 or over) in England and Wales on 24 September. [49] [50]
An updated app released on 29 October, in part from collaboration with the Alan Turing Institute, improved the accuracy of measurements of the distance between the user's phone and other phones. [51] At the same time, the duration threshold for determining exposure was reduced; this was expected to lead to an increase in the number of users told to self-isolate. [52] [14]
An update to the app in April 2021, timed to coincide with easing of restrictions on hospitality businesses, was blocked by Apple and Google. It was intended that users who tested positive would be asked to share their history of visited venues, to assist in warning others, but this would have contravened assurances by Apple and Google that location data from devices would not be shared. [53]
The app was downloaded six million times on the first day it was generally available (24 September 2020), and after a little over three days the total exceeded 10 million. [55]
After approximately two weeks the app had been downloaded around 16 million times, and Sky News reported that only one alert for an outbreak linked to a venue had been sent. [56] After five weeks, around 29 October, there had been 19 million downloads; this was said to equate to around 40% of adults with access to a compatible smartphone, [52] which Dido Harding stated was "a better performance than any other country where downloading isn't compulsory". [57]
By the end of 2020 the number of users with the app installed had fallen to 13.5 million, of whom an estimated 11.5 million had the app fully operational (Bluetooth and notifications turned on, and location sharing enabled if applicable). [58] At that time it was the second most-downloaded free application in the UK in the Apple App store, [59] behind Zoom and above TikTok. In 2021, the number of users began to rise again from April, reaching a peak of almost 18 million in July and then falling over the next few months to end the year at 13.6 million, of which 9.9 million were estimated to be operational. [58] 2022 saw a gradual but steady decline in user numbers, reaching 8.3 million by the end of October. [58]
The app's effectiveness was evaluated in a February 2021 report by a group of statisticians and epidemiologists [60] from the Alan Turing Institute and the University of Oxford, who analysed the analytical data produced by the app and created epidemiological models assessing the app's impact. It was concluded that during the first months of the second wave of the COVID-19 pandemic, the 1.7 million exposure notifications sent by the app prevented around 600,000 cases of infection in England and Wales between its launch on 24 September 2020 and the end of December 2020. [3] A later study published in Nature Communications in February 2023 estimated that in its first year of use (October 2020 to September 2021) the app's contract tracing function led to around 1 million fewer cases and 9,600 fewer deaths. [54]
In August 2021, the Office for Statistics Regulation reviewed the statistics published by the Department of Health and Social Care, relating to Test and Trace as well as (for the first time) the app. This resulted in a letter from the Director General for Regulation which called for more detail to be published on the quality of statistics about the app, in view of limitations arising from the anonymity granted to app users. [61]
At first there was no link between the app and those of other jurisdictions, but by November 2020 agreements were reached to allow exchange of data with the apps used in Gibraltar, Jersey, Northern Ireland and Scotland; those apps were also based on the Apple/Google system. [7] [62]
At first, users found they could not enter a positive infection test into the app if the test had been arranged outside the app, such as tests carried out as part of surveys or by NHS hospitals or clinics. This issue was addressed quickly, and from 27 September users could request a code from NHS Test and Trace which they could use to log a positive result. However, the app remained unable to recognise negative results from these tests. [63]
It was reported that preparations for the update to the app in late October uncovered a configuration error in the initial version: the threshold for the time spent near an infectious person had been too high, leading to fewer alerts to users. [13]
Privacy safeguards meant that people notified by the app to self-isolate could not claim the £500 Test and Trace Support Payment under the scheme which began on 28 September 2020. (The payment is made to employed people who are asked to isolate, if they cannot work at home and are receiving certain state benefits or have a low income.) [64] This was rectified on 10 December. [65]
During the UK's third wave of COVID-19 in June and July 2021, when social distancing rules started to be relaxed and close contacts were increasing, the number of people being notified by the app and asked to self-isolate increased sharply. The term pingdemic – a play on ping, meaning notification, and pandemic – became popular in the UK's media as many people, including the Prime Minister and other senior ministers, were affected. [67]
In late July, the government responded by expanding the list of critical occupations, adding sectors including waste disposal, the food industry and transport. These workers who are close contacts of infected people are exempt from self-isolation but should take daily COVID-19 tests. [68] Further changes were made on 16 August: contacts of infected people no longer have to isolate if they are under the age of 18 or if they had their second vaccine dose at least 14 days previously. Instead, they are advised to take a PCR test. [69]
In March 2023, it was reported in the Guardian that the NHS COVID-19 app would be decommissioned due to decreasing demand and the end of lockdown restrictions, though vaccine passport functions would remain available in the NHS app. [70] The final version was released on 24 April [71] [72] and it was closed on 27 April. [1]
Within NHSX, the project was led by CEO Matthew Gould and Geraint Lewis. [73] [21] Around 17 June, Gould and Lewis returned to their other duties, and Simon Thompson – chief product officer at online supermarket Ocado and a former Apple executive – was brought in to manage the project. [74] In October, Thompson was replaced by Gaby Appleton, on a six-month secondment from a directorship at academic publisher Elsevier. [75]
In October 2020, Randeep Sidhu held the post of 'head of product' for the app. [76]
Diana Mary "Dido" Harding, Baroness Harding of Winscombe is a British businesswoman and life peer who served as chair of NHS Improvement from 2017 to 2021, and as interim chief executive of the UK Health Security Agency (UKHSA) and head of NHS Test and Trace from 2020 to 2021.
The NHS App allows patients using the National Health Service in England to book appointments with their GP, order repeat prescriptions and access their GP record. Available since late 2018, the app was developed by NHS Digital and NHS England. The health ministers Jeremy Hunt and Matt Hancock both stressed their support for the project. Hancock presented it as the key a radical overhaul of NHS technology. Hunt claimed it would mark 'the death-knell of the 8am scramble for GP appointments that infuriates so many patients'.
NHSX was a United Kingdom Government unit from early 2019 to early 2022, with responsibility for setting national policy and developing best practice for National Health Service (NHS) technology, digital and data, including data sharing and transparency.
COVID-19 apps include mobile-software applications for digital contact-tracing—i.e. the process of identifying persons ("contacts") who may have been in contact with an infected individual—deployed during the COVID-19 pandemic.
Coronavirus Australia was an app released by the Australian Government designed to allow users to access information about the COVID-19 pandemic in Australia. The app was released by the Department of Health on 29 March 2020, and decommissioned two years later on 31 August 2022. Over its lifetime, the app was downloaded over a million times and was initially ranked first in the Apple App Store's "Health and Fitness" category. Due to the short development period of two weeks, the app initially served primarily as an aggregate of links to official government websites. Shortly after an update was released adding a voluntary "isolation registration" form that collected the location, name, age, mobile phone number, isolation start date, and various other details about users who were self isolating.
BlueTrace is an open-source application protocol that facilitates digital contact tracing of users to stem the spread of the COVID-19 pandemic. Initially developed by the Singaporean Government, BlueTrace powers the contact tracing for the TraceTogether app. Australia and the United Arab Emirates have already adopted the protocol in their gov apps, and other countries were considering BlueTrace for adoption. A principle of the protocol is the preservation of privacy and health authority co-operation.
TraceTogether was a digital system implemented by the Government of Singapore to facilitate contact tracing efforts in response to the COVID-19 pandemic in Singapore. The main goal was a quick identification of persons who may have come into close contact with anyone who has tested positive for COVID-19. The system helps in identifying contacts such as strangers encountered in public one would not otherwise be able to identify or remember. Together with SafeEntry, it allows the identification of specific locations where a spread between close contacts may occur.
The Big Data Institute (BDI), part of the Li Ka Shing Centre for Health Information and Discovery, is an interdisciplinary research institute at the University of Oxford. The institute brings together researchers from both the Nuffield Department of Population Health and the Nuffield Department of Medicine. The BDI building is on the Old Road Campus in Headington, east Oxford, England.
The following is a timeline of the COVID-19 pandemic in the United Kingdom from January 2020 to June 2020.
The (Google/Apple) Exposure Notification System (GAEN) is a framework and protocol specification developed by Apple Inc. and Google to facilitate digital contact tracing during the COVID-19 pandemic. When used by health authorities, it augments more traditional contact tracing techniques by automatically logging close approaches among notification system users using Android or iOS smartphones. Exposure Notification is a decentralized reporting protocol built on a combination of Bluetooth Low Energy technology and privacy-preserving cryptography. It is an opt-in feature within COVID-19 apps developed and published by authorized health authorities. Unveiled on April 10, 2020, it was made available on iOS on May 20, 2020 as part of the iOS 13.5 update and on December 14, 2020 as part of the iOS 12.5 update for older iPhones. On Android, it was added to devices via a Google Play Services update, supporting all versions since Android Marshmallow.
COVIDSafe was a digital contact tracing app released by the Australian Government on 26 April 2020 to help combat the ongoing COVID-19 pandemic. The app was intended to augment traditional contact tracing by automatically tracking encounters between users and later allowing a state or territory health authority to warn a user they have come within 1.5 metres with an infected person for 15 minutes or more. To achieve this, it used the BlueTrace and Herald protocol, originally developed by the Singaporean Government and VMWare respectively, to passively collect an anonymised registry of near contacts. The efficacy of the app was questioned over its lifetime, ultimately identifying just 2 confirmed cases by the time it was decommissioned on 16 August 2022.
Digital contact tracing is a method of contact tracing relying on tracking systems, most often based on mobile devices, to determine contact between an infected patient and a user. It came to public prominence in the form of COVID-19 apps during the COVID-19 pandemic. Since the initial outbreak, many groups have developed nonstandard protocols designed to allow for wide-scale digital contact tracing, most notably BlueTrace and Exposure Notification.
Decentralized Privacy-Preserving Proximity Tracing is an open protocol developed in response to the COVID-19 pandemic to facilitate digital contact tracing of infected participants. The protocol, like competing protocol Pan-European Privacy-Preserving Proximity Tracing (PEPP-PT), uses Bluetooth Low Energy to track and log encounters with other users. The protocols differ in their reporting mechanism, with PEPP-PT requiring clients to upload contact logs to a central reporting server, whereas with DP-3T, the central reporting server never has access to contact logs nor is it responsible for processing and informing clients of contact. Because contact logs are never transmitted to third parties, it has major privacy benefits over the PEPP-PT approach; however, this comes at the cost of requiring more computing power on the client side to process infection reports.
NHS Test and Trace was a government-funded service in England, established in 2020 to track and help prevent the spread of COVID-19. The programme is part of the UK Health Security Agency; the service and the agency are headed by Jenny Harries.
The following is a timeline of the COVID-19 pandemic in England from January 2020 to June 2020. There are significant differences in the legislation and the reporting between the countries of the UK: England, Scotland, Northern Ireland, and Wales.
COVID Alert was the Exposure Notification service app for the country of Canada. It launched in the province of Ontario on July 31, 2020, and became available in nearly all Canadian provinces by October of that year, excluding Alberta, and British Columbia.
COVID Tracker Ireland is a digital contact tracing app released by the Irish Government and the Health Service Executive on 7 July 2020 to prevent the spread of COVID-19 in Ireland. The app uses ENS and Bluetooth technology to determine whether a user have been a close contact of someone for more than 15 minutes who tested positive for COVID-19. On 8 July, the app reached one million registered users within 36 hours after its launch, representing more than 30% of the population of Ireland and over a quarter of all smartphone users in the country. As of August 2021, over 3,030,000 people have downloaded the app.
Test, Trace, Protect is a government-funded service in Wales, first published on 13 May 2020 by the Welsh Government to track and help prevent the spread of COVID-19. Its aim is to "enhance health surveillance in the community, undertake effective and extensive contact tracing, and support people to self-isolate".
The following is a timeline of the COVID-19 pandemic in England from July 2020 to December 2020. There are significant differences in the legislation and the reporting between the countries of the UK: England, Scotland, Northern Ireland, and Wales.
The United Kingdom's response to the COVID-19 pandemic consists of various measures by the healthcare community, the British and devolved governments, the military and the research sector.