Contact tracing app Aarogya Setu is facing renewed criticism for lack of transparency, with many security experts pointing out that what the government released as the app’s ‘back-end code’ was not what it was claimed to be. “What they’ve released right now is some non-functional code snippets. It is client-side code loaded onto the app from a web address and not the server functions or the data-handling part. The back-end code, which handles the data, including the data schemas, has still been kept secret," said Anivar Aravind, an advisory board member at the Software Freedom Law Center (SFLC), who had challenged the mandatory imposition of the app in the Karnataka high court, highlighting its implications on privacy.
Prasid Banerjee. 'Experts seek full Aarogya Setu code, not bits of it', Mint