COVID-19, policy change, and post-pandemic data governance: a case analysis of contact tracing applications in East Asia