well, that's the centralised implementation, which i also don't like. iirc there's a decentralised implementation where, instead of tracking your location and sending it to a central server, each device would have a uuid. whenever you come near someone, both of your devices would just swap uuids and take note of them, and if either of you catches covid, they can just open that list of collected uuids and use that to notify the people who came into contact with them. imo not only is this more privacy-friendly, but it saves infrastructure costs from not having to host centralised servers.