Contact-tracing app violates its own privacy policy

I think things like privacy policies should be vetted by an adversarial third party.

Lots of systems work better this way - government works better with checks and balances, drivers drive better with the state police watching the roads, voting booths are supervised by members of all parties.