Australia’s spy agencies collected data in the Covidsafe contact tracing app

This link goes to the piece:

https://www.theguardian.com/australia-news/live/2020/nov/24/...

"The inspector general of intelligence and security, Jake Blight, has revealed Australia’s spy agencies collected data in the Covidsafe contact tracing app in the past seven months.

In his first report on the use of the data, Blight found Australia’s spy agencies had policies in place to ensure Covidsafe app data was not intentionally collected, but there had been “incidental collection in the course of lawful collection of other data” and that was permitted under the Privacy Act."

I wonder if this bit:

"had policies in place to ensure Covidsafe app data was not intentionally collected, but there had been “incidental collection in the course of lawful collection of other data”"

Means they hoovered some FCovidSafe app data up from phones they did bulk extractions on, or if they "incidentally collected" it when imaging a rack or two of servers in an AWS datacenter?