COVI White Paper-Version 1.1

The SARS-CoV-2 (Covid-19) pandemic has resulted in significant strain on health care and public health institutions around the world. Contact tracing is an essential tool for public health officials and local communities to change the course of the Covid-19 pandemic. Standard manual contact tracing of people infected with Covid-19, while the current gold standard, has significant challenges that limit the ability of public health authorities to minimize community infections. Personalized peer-to-peer contact tracing through the use of mobile applications has the potential to shift the paradigm of Covid-19 community spread. Although some countries have deployed centralized tracking systems through either GPS or Bluetooth, more privacy-protecting decentralized systems offer much of the same benefit without concentrating data in the hands of a state authority or in for-profit corporations. Additionally, machine learning methods can be used to circumvent some of the limitations of standard digital tracing by incorporating many clues (including medical conditions, self-reported symptoms, and numerous encounters with people at different risk levels, for different durations and distances) and their uncertainty into a more graded and precise estimation of infection and contagion risk. The estimated risk can be used to provide early risk awareness, personalized recommendations and relevant information to the user and connect them to health services. Finally, the non-identifying data about these risks can inform detailed epidemiological models trained jointly with the machine learning predictor, and these models can provide statistical evidence for the interaction and importance of different factors involved in the transmission of the disease. They can also be used to monitor, evaluate and optimize different health policy and confinement/deconfinement scenarios according to medical and economic productivity indicators. However, such a strategy based on mobile apps and machine learning should proactively mitigate potential ethical and privacy risks, which could have substantial impacts on society (not only impacts on health but also impacts such as stigmatization and abuse of personal data). Here, we present an overview of the rationale, design, ethical considerations and privacy strategy of ‘COVI,’ a Covid-19 public peer-to-peer contact tracing and risk awareness mobile application developed in Canada. Addendum 2020-07-14: The government of Canada has declined to endorse COVI and will be promoting a different app for decentralized contact tracing. In the interest of preventing fragmentation of the app landscape, COVI will therefore not be deployed to end users. We are currently still in the process of finalizing the project, and plan to release our code and models for academic consumption and to make them accessible to other States should they wish to deploy an app based on or inspired by said code and models. University of Ottawa, Mila, Université de Montréal, The Alan Turing Institute, University of Oxford, University of Pennsylvania, McGill University, Borden Ladner Gervais LLP, The Decision Lab, HEC Montréal, Max Planck Institute, Libéo, University of Toronto. Corresponding author general: richard.janda@mcgill.ca Corresponding author for public health: abhinav.sharma@mcgill.ca Corresponding author for privacy: ywyu@math.toronto.edu Corresponding author for machine learning: yoshua.bengio@mila.quebec Corresponding author for user perspective: brooke@thedecisionlab.com Corresponding author for technical implementation: jean-francois.rousseau@libeo.com 1 ar X iv :2 00 5. 08 50 2v 2 [ cs .C R ] 2 7 Ju l 2 02 0

[1]  R. Morgan,et al.  COVID-19: the gendered impacts of the outbreak , 2020, The Lancet.

[2]  Hannah R. Meredith,et al.  The Incubation Period of Coronavirus Disease 2019 (COVID-19) From Publicly Reported Confirmed Cases: Estimation and Application , 2020, Annals of Internal Medicine.

[3]  Dan Boneh,et al.  Riposte: An Anonymous Messaging System Handling Millions of Users , 2015, 2015 IEEE Symposium on Security and Privacy.

[4]  William F Flanagan,et al.  Equality rights for people with AIDS: mandatory reporting of HIV infection and contact tracing. , 1989, McGill law journal. Revue de droit de McGill.

[5]  Arieh Waldman Cognitive Biases, Dark Patterns, and the 'Privacy Paradox' , 2019, Current opinion in psychology.

[6]  Benno Torgler,et al.  The relationship between stress, strain and social capital , 2011 .

[7]  R. Kelly Garrett,et al.  The “Echo Chamber” Distraction: Disinformation Campaigns are the Problem, Not Audience Fragmentation , 2017 .

[8]  Alexander J. Rothman,et al.  Perceived susceptibility to breast cancer moderates the effect of gain- and loss-framed messages on use of screening mammography. , 2011, Health psychology : official journal of the Division of Health Psychology, American Psychological Association.

[9]  Kim D Raine,et al.  Assessing general public and policy influencer support for healthy public policies to promote healthy eating at the population level in two Canadian provinces , 2019, Public Health Nutrition.

[10]  FOR DISEASE CONTROL AND PREVENTION , 2006 .

[11]  S. Michie,et al.  A refined taxonomy of behaviour change techniques to help people change their physical activity and healthy eating behaviours: The CALO-RE taxonomy , 2011, Psychology & health.

[12]  Ramesh Raskar,et al.  Apps Gone Rogue: Maintaining Personal Privacy in an Epidemic , 2020, ArXiv.

[13]  D. Kozlowski,et al.  Physical interventions to interrupt or reduce the spread of respiratory viruses , 2012 .

[14]  Lukasz Kaiser,et al.  Attention is All you Need , 2017, NIPS.

[15]  Jakob Nielsen Usability metrics: tracking interface improvements , 1996 .

[16]  Yi-Feng Xu,et al.  Patients with mental health disorders in the COVID-19 epidemic , 2020, The Lancet Psychiatry.

[17]  Anita M. McGahan,et al.  Innovation for Inclusive Growth: Towards a Theoretical Framework and a Research Agenda , 2012 .

[18]  David Chaum,et al.  Untraceable electronic mail, return addresses, and digital pseudonyms , 1981, CACM.

[19]  Ben Poole,et al.  Categorical Reparameterization with Gumbel-Softmax , 2016, ICLR.

[20]  J. Burgess,et al.  A Contact-Tracing Procedure* , 1963, The British journal of venereal diseases.

[21]  Lucie Abeler-Dörner,et al.  Quantifying SARS-CoV-2 transmission suggests epidemic control with digital contact tracing , 2020, Science.

[22]  V. Liu,et al.  Data breaches of protected health information in the United States. , 2015, JAMA.

[23]  Latanya Sweeney,et al.  k-Anonymity: A Model for Protecting Privacy , 2002, Int. J. Uncertain. Fuzziness Knowl. Based Syst..

[24]  Marc Lipsitch,et al.  Quantifying bias of COVID-19 prevalence and severity estimates in Wuhan, China that depend on reported cases in international travelers , 2020, medRxiv.

[25]  Peter A Hancock,et al.  State of science: mental workload in ergonomics , 2015, Ergonomics.

[26]  Nickolai Zeldovich,et al.  Stadium: A Distributed Metadata-Private Messaging System , 2017, IACR Cryptol. ePrint Arch..

[27]  Dawn Song,et al.  Epione: Lightweight Contact Tracing with Strong Privacy , 2020, IEEE Data Eng. Bull..

[28]  Debra Revere,et al.  Public health communications and alert fatigue , 2013, BMC Health Services Research.

[29]  T. Hollingsworth,et al.  How will country-based mitigation measures influence the course of the COVID-19 epidemic? , 2020, The Lancet.

[30]  James Q. Whitman The Two Western Cultures of Privacy: Dignity versus Liberty , 2004 .

[31]  Noel Ryan Willpower: Rediscovering the greatest human strength, by Roy F. Baumeister and John Tierney , 2012 .

[32]  H. Plessner,et al.  Implicit consumer preferences and their influence on product choice , 2006 .

[33]  C. Rossmann,et al.  Content Effects: Health Campaign Communication , 2017 .

[34]  Ronald J. Williams,et al.  Simple Statistical Gradient-Following Algorithms for Connectionist Reinforcement Learning , 2004, Machine Learning.

[35]  Delia Grace,et al.  Development and delivery of evidence-based messages to reduce the risk of zoonoses in Nairobi, Kenya , 2012, Tropical Animal Health and Production.

[36]  Pavani K. Ram,et al.  Behavior Change without Behavior Change Communication: Nudging Handwashing among Primary School Students in Bangladesh , 2016, International journal of environmental research and public health.

[37]  Steven Chan,et al.  Human Behavior with Mobile Health: Smartphone/ Devices, Apps and Cognition , 2018, Psychology and Cognitive Sciences - Open Journal.

[38]  Ralph C. Merkle,et al.  Secure communications over insecure channels , 1978, CACM.

[39]  J. Krause,et al.  Social network theory in the behavioural sciences: potential applications , 2007, Behavioral Ecology and Sociobiology.

[40]  Mikhail Prokopenko,et al.  Modelling transmission and control of the COVID-19 pandemic in Australia , 2020, Nature Communications.

[41]  Christopher P. Furner,et al.  Privacy Assurance and Network Effects in the Adoption of Location-Based Services: an iPhone Experiment , 2010, ICIS.

[42]  Delan Devakumar,et al.  Racism and discrimination in COVID-19 responses , 2020, The Lancet.

[43]  Max Welling,et al.  Auto-Encoding Variational Bayes , 2013, ICLR.

[44]  Harsh Kupwade Patil,et al.  Big Data Security and Privacy Issues in Healthcare , 2014, 2014 IEEE International Congress on Big Data.

[45]  Yoshua Bengio,et al.  Estimating or Propagating Gradients Through Stochastic Neurons for Conditional Computation , 2013, ArXiv.

[46]  S. Segerstrom,et al.  Current Directions in Stress and Human Immune Function. , 2015, Current opinion in psychology.

[47]  J. Rubenfeld The Right of Privacy , 1989 .

[48]  M. Banaji,et al.  Easier done than undone: asymmetry in the malleability of implicit preferences. , 2006, Journal of personality and social psychology.

[49]  Geoffrey E. Hinton,et al.  The "wake-sleep" algorithm for unsupervised neural networks. , 1995, Science.

[50]  Yiu Chung Lau,et al.  Temporal dynamics in viral shedding and transmissibility of COVID-19 , 2020, Nature Medicine.

[51]  Priscilla M. Regan Legislating Privacy: , 2018, The Handbook of Privacy Studies.

[52]  M. Turakhia,et al.  Using Digital Health Technology to Better Generate Evidence and Deliver Evidence-Based Care. , 2018, Journal of the American College of Cardiology.

[53]  Hyunghoon Cho,et al.  Contact Tracing Mobile Apps for COVID-19: Privacy Considerations and Related Trade-offs , 2020, ArXiv.

[54]  Shane G. Henderson,et al.  Safe blues: a method for estimation and control in the fight against COVID-19 , 2020 .

[55]  Chingching Chang,et al.  Self-Control-Centered Empowerment Model: Health Consciousness and Health Knowledge as Drivers of Empowerment-Seeking through Health Communication , 2019, Health communication.

[56]  Dean P. Foster,et al.  PACT: Privacy-Sensitive Protocols And Mechanisms for Mobile Contact Tracing , 2020, IEEE Data Eng. Bull..

[57]  Paul F. Syverson,et al.  Anonymous connections and onion routing , 1998, IEEE J. Sel. Areas Commun..

[58]  Hayley McGuffie,et al.  NHS Covid 19 app , 2020 .

[59]  Matthew L Levine Contact tracing for HIV infection: a plea for privacy. , 1988, Columbia human rights law review.

[60]  Ronald J. Deibert,et al.  Advancing Human Rights-by-Design in the Dual-Use Technology Industry , 2018 .

[61]  A. Bandura Self-efficacy: toward a unifying theory of behavioral change. , 1977, Psychological review.

[62]  Nuno Fernandes,et al.  Economic Effects of Coronavirus Outbreak (COVID-19) on the World Economy , 2020, SSRN Electronic Journal.

[63]  R. C. Silver,et al.  The novel coronavirus (COVID-2019) outbreak: Amplification of public health consequences by media exposure. , 2020, Health psychology : official journal of the Division of Health Psychology, American Psychological Association.

[64]  Marshall D. Rice,et al.  Privacy in Doubt: An Empirical Investigation of Canadians' Knowledge of Corporate Data Collection and Usage Practices , 2019 .

[65]  Jin H. Im,et al.  Privacy , 2002, Encyclopedia of Information Systems.

[66]  R. MacCallum,et al.  Chronic Stress Modulates the Immune Response to a Pneumococcal Pneumonia Vaccine , 2000, Psychosomatic medicine.

[67]  Steve Whittaker,et al.  Progressive disclosure: empirically motivated approaches to designing effective transparency , 2019, IUI.

[68]  A. Bauman,et al.  The use of smartphone health apps and other mobile health (mHealth) technologies in dietetic practice: a three country study , 2017, Journal of human nutrition and dietetics : the official journal of the British Dietetic Association.

[69]  Herbert Gintis,et al.  Richard H. Thaler – Cass R. Sunstein: Nudge: Improving Decisions about Health, Wealth, and Happiness , 2008 .

[70]  G. Leung,et al.  First-wave COVID-19 transmissibility and severity in China outside Hubei after control measures, and second-wave scenario planning: a modelling impact assessment , 2020, The Lancet.

[71]  Kenan Degirmenci,et al.  Mobile users' information privacy concerns and the role of app permission requests , 2020, Int. J. Inf. Manag..

[72]  Angeliki Poulymenakou,et al.  Developing a Usability Evaluation Method for e-Learning Applications: Beyond Functional Usability , 2009, Int. J. Hum. Comput. Interact..

[73]  Simone Fischer-Hübner,et al.  Surveillance and Privacy , 2010, HCC.

[74]  Jason Bay,et al.  BlueTrace: A privacy-preserving protocol for community-driven contact tracing across borders , 2020 .

[75]  Angela Fagerlin,et al.  “Is 28% Good or Bad?” Evaluability and Preference Reversals in Health Care Decisions , 2004, Medical decision making : an international journal of the Society for Medical Decision Making.

[76]  Bill Gates,et al.  Responding to Covid-19 - A Once-in-a-Century Pandemic? , 2020, The New England journal of medicine.

[77]  Adam Kowol The theory of cognitive dissonance By , 2008 .

[78]  M Krajden,et al.  Assessment of in-flight transmission of SARS--results of contact tracing, Canada. , 2003, Canada communicable disease report = Releve des maladies transmissibles au Canada.

[79]  Ramesh Raskar,et al.  Assessing Disease Exposure Risk With Location Histories And Protecting Privacy: A Cryptographic Approach In Response To A Global Pandemic , 2020, ArXiv.

[80]  Daniel Blank,et al.  Slowing the Spread of Infectious Diseases Using Crowdsourced Data , 2020, IEEE Data Eng. Bull..

[81]  孙昕昕,et al.  The Unbearable Lightness of Being: , 2010 .

[82]  Matthias Hunger,et al.  Official statistics and claims data records indicate non-response and recall bias within survey-based estimates of health care utilization in the older population , 2013, BMC Health Services Research.

[83]  N. Kraguljac,et al.  COVID-19: Facts, Cultural Considerations, and Risk of Stigmatization , 2020, Journal of transcultural nursing : official journal of the Transcultural Nursing Society.

[84]  Somesh Jha,et al.  Model Inversion Attacks that Exploit Confidence Information and Basic Countermeasures , 2015, CCS.

[85]  Lawrence O Gostin,et al.  Responding to Covid‐19: How to Navigate a Public Health Emergency Legally and Ethically , 2020, The Hastings Center report.

[86]  Giuseppe A. Veltri,et al.  The impact of different forms of cognitive scarcity on online privacy disclosure , 2017, Comput. Hum. Behav..

[87]  R. Brook,et al.  Response to COVID-19 in Taiwan: Big Data Analytics, New Technology, and Proactive Testing. , 2020, JAMA.

[88]  William R. Frey,et al.  Artificial Intelligence and Inclusion: Formerly Gang-Involved Youth as Domain Experts for Analyzing Unstructured Twitter Data , 2018, Social science computer review.

[89]  Anil Kumar Understanding Privacy , 2010 .

[90]  Nickolai Zeldovich,et al.  Vuvuzela: scalable private messaging resistant to traffic analysis , 2015, SOSP.

[91]  Suhail A R Doi,et al.  A unified framework for bias assessment in clinical research. , 2019, International journal of evidence-based healthcare.

[92]  R. Heiner The Origin of Predictable Behavior , 1983 .

[93]  Salah Chafik,et al.  Community trust reduces myopic decisions of low-income individuals , 2017, Proceedings of the National Academy of Sciences.

[94]  S. Segerstrom,et al.  Psychological stress and the human immune system: a meta-analytic study of 30 years of inquiry. , 2004, Psychological bulletin.

[95]  Alexander K. Koch,et al.  Self-Regulation Through Goal Setting , 2011, SSRN Electronic Journal.

[96]  Christopher Joseph Pal,et al.  Sparse Attentive Backtracking: Temporal CreditAssignment Through Reminding , 2018, NeurIPS.

[97]  Carmela Troncoso,et al.  Decentralized Privacy-Preserving Proximity Tracing , 2020, IEEE Data Eng. Bull..

[98]  Michael Y. Li,et al.  Global stability for the SEIR model in epidemiology. , 1995, Mathematical biosciences.