Madhya Pradesh app to track patients leaks personal data, taken offline

The database contained the names of people who are meant to be quarantined, information about the type of phone they used and their last known location – at times as accurate as within 5 metres – and was available for download on an mp.gov.in website.
Migrants board NMMT buses at Turbhe MIDC Police Station to reach their native state Madhya Pradesh, during a nationwide lockdown in the wake of coronavirus pandemic, in Navi Mumbai, Sunday, May 10, 2020.(PTI)
Migrants board NMMT buses at Turbhe MIDC Police Station to reach their native state Madhya Pradesh, during a nationwide lockdown in the wake of coronavirus pandemic, in Navi Mumbai, Sunday, May 10, 2020.(PTI)
Updated on May 11, 2020 06:40 AM IST
Copy Link
Hindustan Times, Bhopal | By

A digital tool used by Madhya Pradesh government to track people who are meant to be quarantined was found to have exposed the personal details, including real-time location, of thousands of individuals before it was pulled down on Sunday after a French computer programmer tweeted about it.

The database contained the names of people who are meant to be quarantined, information about the type of phone they used and their last known location – at times as accurate as within 5 metres – and was available for download on an mp.gov.in website. Before it was pulled down on Sunday evening, it contained the names of at least 5,400 people.

“There is some information on the portal which should not have been there. Hence, we are going to remove the dashboard and working on a new access strategy under which only authorised persons will be given access to information to the data,” said Nand Kumaram, the chief executive officer (CEO) of Madhya Pradesh Agency for Promotion of Information Technology (MAP-IT), a state government agency that developed the system from where the data was leaked.

MAP-IT is a part of Madhya Pradesh government’s department of science and technology and uses a mobile phone application called Sarthak that needs to be installed by people who need to be under home quarantine since they may have or are confirmed to have the coronavirus disease (Covid-19).

“Sarthak App is to help us in Covid management. The information stored in the App is confidential and is not meant for making it public. However, we are trying to verify if names being made public on the portal are real ones or as stored in the app,” Kumaram added.

Privacy and health experts said the leak, exposed by the French man who guys by the nom de guerre of Elliot Alderson in a tweet on Sunday afternoon, was a major breach. “If you store data in such a risky manner, where it could immediately lead to the identification of an individual, you have to security measures to make sure no one can access it. They didn’t do that here and the Madhya Pradesh government is now legally responsible if there is a breach of such people’s privacy,” said Raman Jit Singh Chima, Asia policy director and senior international counsel at Access Now.

The Union government had in an advisory on April 8 said that those affected by Covid-19 or under quarantine should not be identified.

“It can’t be allowed this way. Making public name of any quarantined person without his consent is violation of his rights. The information is for analysis and follow-up, not to stigmatise people and create terror among them about Covid,” said Bhopal-based public health expert Amulya Nidhi. “There should be a detailed inquiry into this as to who allowed this and whether consent of quarantined people was taken for making public his name. Action should be taken against officials responsible,” he added.

Principal secretary, Health, Faiz Ahmad Kidwai said: “Sarthak app is to help the department to monitor quarantined people. I will look into it if something like this has happened.”

(With inputs from Binayak Dasgupta)

SHARE THIS ARTICLE ON
  • ABOUT THE AUTHOR

    Ranjan Srivastava leads HT’s coverage from Bhopal. He has spent more than two decades in journalism in Uttar Pradesh and Madhya Pradesh, covering political and other affairs. For the past 16 years, he has been working in Madhya Pradesh.

Close Story
QUICKREADS

Less time to read?

Try Quickreads

  • A view of Dhan Mill Compound at 100 Feet Road, Chhatarpur, in New Delhi, India, on Saturday, July 2, 2022. (Photo by Amal KS/Hindustan Times)

    Delhi: From a granary to creative business street

    For the uninitiated, Dhan Mill Compound, a former granary and a cluster of warehouses, has morphed into the city’s modish food, fashion, design and lifestyle destination. Its streets are lined with art cafes, home décor outlets, ateliers, art galleries, pottery studios, dance halls and high-end boutiques, whose facades and interiors are as interesting and experimental as the wares they deal in. Interestingly, all of these fancy establishments are housed in re-purposed warehouse buildings, which still have metal roofs.

  • Delhi deputy chief minister Manish Sisodia. (Twitter/@AAPDelhi)

    Over a million got jobs on Rozgar Bazaar: Delhi govt

    According to a Delhi government official, a break-up of the total jobs, including the list of employers and the number of people they hired, will be shared “in a couple of days”. Notably, the government portal was launched by chief minister Arvind Kejriwal on July 27, 2020, to help entry-level and blue-collar job seekers connect with employers at a time when the Covid-19 induced lockdown left many people unemployed.

  • Delhi environment minister Gopal Rai. (ANI)

    Govt to urge Centre to reduce tax for SUP options: Delhi minister

    “Manufactures, and start-ups which are working on alternatives to single-use plastic have to pay more GST for raw material. Hence, the Delhi government will write to the Centre and request a reduction in GST rates,” Delhi environment minister Gopal Rai said.

  • A view of Humayun's Tomb on a rainy day in New Delhi, India, on Sunday, July 3, 2022. (Photo by Sanchit Khanna/Hindustan Times)

    Delhi weather: Yellow alert issued till Tuesday

    Safdarjung, Delhi’s base weather station, recorded 0.1mm of rainfall between 8:30am and 5:30pm on Sunday. The Capital recorded 1.9mm of rainfall on Saturday and 117.2mm on Friday, making the monthly total 119.2mm so far. The normal monthly average for July is 210.6mm, said weather experts.

  • Monsoon turns Hauz Khas monument into an archipelago of stony islands.

    Delhiwale: Six shades of monsoon

    Monsoon elevates Adam Khan’s tomb into an emergency sanctuary for passersby (and dogs) speared by sudden showers. Perched atop a Mehrauli hillock, the monument overlooks the Qutub Minar, which appears totally bechara and defenceless in the heavy rain.

SHARE
Story Saved
×
Saved Articles
Following
My Reads
Sign out
New Delhi 0C
Monday, July 04, 2022