I have no app on my iPhone with the ability to use my location in the background, not even Waze or Google Maps.
Also I don't care about deletion policies. That data should not be collected in the first place.
I don't know about any specifics, but if the data isn't anonymized somehow, on the client side, such that the government can never trace it back to you, then I'd rather catch the virus personally.
I agree about turning the angry mob mode off, but in times of crisis we would do well to remember that our freedoms are being traded for a little security and in many cases it isn't temporary.
And Australia in particular doesn't have a good track record in preserving those freedoms.
Therefore it isn't unreasonable to ask for source code. This isn't even about the GPL, people need the ability to review the code, especially if it's a public service paid by taxpayers. In my opinion such projects should be developed in the open, always.