Testing and contact tracing is currently the only known method of averting community transmission. Designing the best application to enable this will require striking a balance between gathering data that is epidemiologically useful and ensuring data privacy is respected.