“California governor Gavin Newsom endorsed his state’s version of the app, calling it “100% private & secure” in a tweet last December.”
The contact tracing data landed in a system log on Android phones. Hundreds of preinstalled apps can read that log. Researchers told Google in February. The promise was that only public health agencies would ever see the data. The bloatware that ships on the phone got a look too.