Asian countries, including China, India and South Korea, have managed to control the spread of covid-19 with the help of digital contact tracing apps to track movement of people and identify those who may have come in touch with infected people, said a report by UK-based data analytics company Global Data.

No matter how you feel about contact tracing, it’s been openly embraced by federal authorities around the world, from the UK, to Germany, to, well, you name it, as a way to curb the spread of the current pandemic. And while every country grapples with the long-term privacy implications of downloading this sort of tracking tech onto their phone, one country—India—has drawn more than a few raised eyebrows over its app, which is reportedly not only invasive but quickly becoming a mandatory download for the millions of people currently residing there.

That’s according to a new Buzzfeed News report about the app, called Aarogya Setu—literally “a bridge to health,” in Hindi. Per the report, though Indian authorities initially offered citizens the opportunity to opt-in voluntarily, it’s quickly becoming a required download for gig workers and federal officials alike. Meanwhile, an independent analysis of the app by Gizmodo revealed that this increasingly mandatory app didn’t only enable federal surveillance on a massive scale, but was a battery-drainer that opened these devices to a buffet of hacks as well.
Aarogya Setu initially rolled out at the start of last month and gained steam at a breakneck pace, reaching 50 million downloads in less than two weeks of its launch, with those numbers continuing to skyrocket as the month went on. Like many of the contact-tracing apps we’ve seen internationally, the idea here was that people could download it voluntarily—last month, India’s Prime Minister Narendra Modi sent out a tweet urging people to download the app, calling it an “important step” fighting a pandemic that claimed more than 1,000 lives across the country to date.

India is no stranger to federally-funded surveillance tech, and the fact that this data is being funneled straight into the government’s hands means that the location of millions will now be delivered straight into the already sprawling dossier India’s government has on each and every citizen. Keep in mind that these are the same authorities that have, in the past, openly spoken about their right to freely snoop on the texts and calls on citizen’s devices. This also the same government that has been moving towards in an increasingly disturbing form of Hindu nationalism that inflicts violence on its Muslim population—in other words, it’s not the greatest environment for microtargeted surveillance overreach to blossom.

And because Aarogya Setu permanently flips a downloader’s bluetooth into the “on” position, the app doesn’t only turn into a massive battery drain, but also opens a person’s phone to all sorts of hacks that could be easily prevented otherwise. Put another way, by mandating that millions download this app, India’s government isn’t just siphoning this data for themselves, but likely for an untold number of hackers along the way.

There are all sorts of reasons that contact tracing is unlikely to be the magic bullet some federal authorities are hoping for, and lack of adoption is certainly a concern. Mandating the download of an invasive, insecure app might halt the virus’s spread to some degree, but it’s far, far more likely to get these people snooped on, hacked, and spammed. And when governments insist on ignoring proper security measures, it makes everyone wary of even the most ethical apps.