Cwa-app-ios: Availability in non-German App Stores

[inforsgit]

I was excited to download the app this morning, thanks for the great work in getting it ready!

However, I notice that it is only downloadable from the German App Store. For a very large number of people living in Germany their phones are signed into a different nation’s App Store and this current approach could limit uptake.

Is it possible to make the app available in other app stores?

[fletcher89]

I don't think this is possible unless Apple specifically allows them to release the App in other App Stores, too. As far as I know Apple and Google said they'll only allow one app per Country App Store (with possible exceptions).

[inforsgit]

I don't think this is possible unless Apple specifically allows them to release the App in other App Stores, too. As far as I know Apple and Google said they'll only allow one app per Country App Store (with possible exceptions).

I’m aware of that statement but I don’t know how it translates into availability of national apps in different app stores. Perhaps one of the devs can comment, or someone that knows about app releases for Apple?

[SebastianWolf-SAP]

Dear colleagues,

we will clarify this issue with the Robert Koch Institute. They are the official entity that released the app in the respective app stores.

We will keep you updated as soon as we know more.

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

[jonjardine]

Agreed. If you have any subscriptions active it's impossible to switch between AppStore countries. I use the UK Store and can't change this. It will prevent asking all visitors to Germany (especially from higher current incidence countries, e.g. UK) to download and use the app.

[DaGaMs]

I can confirm that switching between Apple accounts from different countries is a huge pain. I'm still locked to my UK account, but would like to use the German tracker app while in Germany. It's hard to believe Apple would block the apps in other app stores - please keep us posted on what the RKI says.

[n0rdlicht]

Italian and Swiss Apps based on the same framework are available in other countries for some weeks now, hence shouldn’t be an issue with Apple and Google.

The reality is, that people have Apple IDs/Google Accounts based on their first signup and never change, e.g. for above reasons and many others. People live in different countries throughout their lives and move around. For longer or shorter periods of time. Also: people live and work in different countries around border areas.

[antranapp]

I don't think this is possible unless Apple specifically allows them to release the App in other App Stores, too. As far as I know Apple and Google said they'll only allow one app per Country App Store (with possible exceptions).

I assume this policy means that only one developer in a country has the ability to request the Exposure Entitlement from Apple but it doesn't prevent you to release the app in multiple stores.

[jonjardine]

I don't think this is possible unless Apple specifically allows them to release the App in other App Stores, too. As far as I know Apple and Google said they'll only allow one app per Country App Store (with possible exceptions).

I assume this policy means that only one developer in a country has the ability to request the Exposure Entitlement from Apple but it doesn't prevent you to release the app in multiple stores.

Agreed. It seems a shame that what looks like a good, conscientious, open-source based project has been failed by management decisions. Surely use cases explored would include tourists visiting Germany and people travelling across borders for work / leisure etc.

Just offering the app in the German stores seems like an incredibly blinkered decision.

[securitygeneration]

Yeah this is certainly a limitation that could hamper adoption, particularly in the more international or touristy cities. At the moment when travelers arrive in Germany, they are asked for contact details and contact tracers follow up shortly after to check in and see if they have developed any symptoms. I can imagine that they may want to invite travelers to install this app instead which would simplify things.

I’m in a similar situation (along with a number of my colleagues), live in Germany but stuck on another App Store.

[fletcher89]

I don't think this is possible unless Apple specifically allows them to release the App in other App Stores, too. As far as I know Apple and Google said they'll only allow one app per Country App Store (with possible exceptions).

I assume this policy means that only one developer in a country has the ability to request the Exposure Entitlement from Apple but it doesn't prevent you to release the app in multiple stores.

Hopefully! I fully agree that it doesn't make sense for the app to only be available to Users of the German App Store, it should be available for everyone visiting/living in Germany, regardless of App Store used.

[charlesvestal]

While it’s possible to have apps installed from multiple accounts on one device (Log out and back in in to country B in Settings, install app, log out and back in to country A) - it requires multiple email addresses, and a technical understanding of how App Store accounts work that may be too high a bar for a casual user. Would love for all users to have easy, unhindered access to this in all app stores where possible, especially given the high quality English localization that has been built.

[securitygeneration]

Indeed. It’s bad enough an EU-wide app wasn’t developed, it would be a shame to shoot adoption in the foot by making it impossible (or setting the bar too high) for a portion of the population and visitors to install.

[jonjardine]

While it’s possible to have apps installed from multiple accounts on one device (Log out and back in in to country B in Settings, install app, log out and back in to country A) - it requires multiple email addresses, and a technical understanding of how App Store accounts work that may be too high a bar for a casual user. Would love for all users to have easy, unhindered access to this in all app stores where possible, especially given the high quality English localization that has been built.

This is impossible if you have subscriptions on iOS, e.g. Apple Music. You have to cancel all subscriptions first, then switch stores. I doubt anyone will be willing to do this.

(assuming you want to keep the same account rather than sign-in with a new one, which casual users won't do)

[alneven]

While it’s possible to have apps installed from multiple accounts on one device (Log out and back in in to country B in Settings, install app, log out and back in to country A) - it requires multiple email addresses

that's how I'm using the local apps in Germany, as my primary AppStore/iTunes account is from my country "of origin". For updates you have to do the same. But everything else is working.

And my subscriptions are from my primary country. Never changed. It's working.

[D-32]

I've come across this problem with other apps too and it's frustrating to see this happening here too. Mostly the people that upload an app to the App Store are unaware of what consequences it has to restrict an app to a specific region. If you never moved to a different country, you don't know how frustrating this whole process is.

It's anyway not a 100% restriction, anybody can create a new iTunes account and circumvent that. But even if you do that, as soon as you switch accounts Apple Music resets all your downloaded music 🙄

So please just make it available fo all regions.

[inforsgit]

Indeed...the multiple accounts workaround is possible (that's what I'm using).

I think that before we pile on the devs too much, we should wait on @SebastianWolf-SAP to get more information from RKI as he promised. Never associate to malice what could be explained by simply overlooking something...I'm very appreciative that they at least engage with us :)

[jonjardine]

Indeed...the multiple accounts workaround is possible (that's what I'm using).

I think that before we pile on the devs too much, we should wait on @SebastianWolf-SAP to get more information from RKI as he promised. Never associate to malice what could be explained by simply overlooking something...I'm very appreciative that they at least engage with us :)

Absolutely, not attacking the devs themselves, its a management snafu if anything :)

[monkeydom]

I can confirm that I installed the Italian 'Immuni' App from the US App Store to test the functionality. So the one app per country rule is not enforced in this way. Please adjust.

[holtwick]

Also the Latvian app is available in the German app store and can even live side by side with the German app. Even though only one app is able to track the actual data. A common solution for the European Union would be awesome 👍

https://www.apturicovid.lv/

[ivojuniorx4]

I am in a similar situation, however im on the Brazilian Apple Store. I can’t download it without leaving my family group/all my subscriptions.

[kennethmac2000]

I don't think this is possible unless Apple specifically allows them to release the App in other App Stores, too. As far as I know Apple and Google said they'll only allow one app per Country App Store (with possible exceptions).

What they said is that only one "Entitlement Profile" is available per country:
https://developer.apple.com/contact/request/download/Exposure_Notification_Addendum.pdf

Ie, only one entity per country is allowed to produce a contact-tracing app which uses the Exposure Notification APIs.

That has nothing to do with the _distribution_ of the app though.

This isn't only about _residents_ of Germany using different countries' App Stores, but also _visitors_. Surely Germany actively wants visitors to use its app when on the German federal territory? I don't think coronavirus checks whether you are a resident of the country you're currently in. :)

[NicolaiKilian]

100% agree! I moved from Switzerland to Germany a couple of years ago, still work in Switzerland, and my iOS is still locked to the Swiss AppStore.
I tried to switch the AppStore in the past, but it needed a German credit card, which I don't have.

[amandadebler]

I’d love to be a responsible permanent resident and install this app, but I really have no interest in potentially losing access to my bank accounts back in the US by switching over to the German App Store when, things being how they are, I’m unlikely to be able to make a short visit home anytime soon.

Is there a way to compile it ourselves and install it using XCode, or will only the officially-signed version in the App Store work properly?

[jonjardine]

@amandadebler I suspect only the officially-signed version will work properly, but hopefully the people up the food chain at the RKI will see sense and release it worldwide :)

[alneven]

I’d love to be a responsible permanent resident and install this app, but I really have no interest in potentially losing access to my bank accounts back in the US by switching over to the German App Store when, things being how they are, I’m unlikely to be able to make a short visit home anytime soon.

It's easy. Just register a 2nd itunes/appstore/apple account with a different email (you can for example use a gmail alias if that is your primary email) and it could be also an account without BANKING information (if you don't have any in Germany!). You can download the free apps with that. As mentioned earlier just logout with Account A, login with Account B, download the app, and log back with Account A. You won't loose anything. I have 3 Apple logins, for 3 country I'm interested in. One is my primary. With all my subscriptions, etc. But there are 2 others, also with paid apps and free apps. One has a credit card information, one doesn't have any payment information (I have that only for free apps, which not available in my region!).

If you create a new login for Germany you could also use another local apps, like the one from dm/Drogerie Markt (https://www.dm.de/) with the coupons ;-) or local parking apps if you have a car. ;-)

[dewey]

@alneven Multiple Accounts is not a solution and also not a good workaround. Logging out of your account messes up a bunch of things (Like deleting all your offline music from Apple Music) and other things.

Also for most people creating multiple accounts is a huge hassle, exactly what you don’t want for an app that you already have to convince people to use and where the usefulness of the app depends on as many people as possible using it.

[alneven]

Multiple Accounts is not a solution and also not a good workaround. Logging out of your account messes up a bunch of things (Like deleting all your offline music from Apple Music) and other things.

the Logout is only from the AppStore application, not under Settings (!)
it's like to switch accounts in Twitter or Instagram

the main Apple ID/Icloud/Itunes account is not changed

but I understand your concerns, the app should be available in every appstore (if it's even possible?)
because who should decide in which one it should be presented, there are so many nations in Germany ;-)

and it could be that Apple music is not in sync with that, as they are "purchases"
it's not easy :-D

[2color]

About 13% of people living in Germany are foreigners (source).

It's difficult enough to get people to use this app. I think everything should be done to remove this barrier.

~If I understand correctly, this is due to Apple's restrictions.~ Nevertheless, the message should be relayed that this is a matter of life and death.

Corrections: So there's no restriction on publishing the app to multiple countries. But if you have multiple tracking apps –like in the case of @holtwick– you can only have one of them active.

[jonjardine]

About 13% of people living in Germany are foreigners (source).

It's difficult enough to get people to use this app. I think everything should be done to remove this barrier.

If I understand correctly, this is due to Apple's restrictions. Nevertheless, the message should be relayed that this is a matter of life and death.

It's not an Apple restriction. See @holtwick above (https://github.com/corona-warn-app/cwa-app-ios/issues/623#issuecomment-644716432) - Apple only permit one authority per country, not one app per store country.

[dewey]

About 13% of people living in Germany are foreigners (source).

It's difficult enough to get people to use this app. I think everything should be done to remove this barrier.

If I understand correctly, this is due to Apple's restrictions. Nevertheless, the message should be relayed that this is a matter of life and death.

It's already taken care of, we just have to wait now: https://github.com/corona-warn-app/cwa-app-ios/issues/623#issuecomment-644545651

[Gernot]

It's a bunch of checkboxes in AppStore Connect. As far as I know, those have nothing to do with the Entitlement to use the ExposureNotification Framework, that should be completely separate. If RKI decides to check the checkboxes for availability in other countries, no review is required and it should go live there within the hour.

[kennethmac2000]

About 13% of people living in Germany are foreigners (source).
It's difficult enough to get people to use this app. I think everything should be done to remove this barrier.
If I understand correctly, this is due to Apple's restrictions. Nevertheless, the message should be relayed that this is a matter of life and death.

It's already taken care of, we just have to wait now: #623 (comment)

Is it actually taken care of though?

As @Gernot has said, it's a bunch of checkboxes in App Store Connect. In fact, it's probably easier to publish in every App Store globally than to publish only in one country - you have to go out of your way to do that.

Given the seriousness of this, it's a little hard to understand why RKI couldn't already have made a decision yesterday to fix this. What is even the debate?

[jonjardine]

Given the seriousness of this, it's a little hard to understand why RKI couldn't already have made a decision yesterday to fix this. What is even the debate?

Agreed. I'd hoped they'd have sorted this out by now as my view is its a pretty bad decision if it was deliberate.

[bmulholland]

The bigger concern at this point is that the big PR push about the app is nearly over. When the app finally /is/ available to be downloaded by people on other app stores, how will everyone know to try again? It's not like everyone will get a notification, and the newspapers etc won't publish a story of "hey, try downloading the app again." This actually makes the topic quite urgent: the longer it takes, the more it hurts adoption, which directly challenges the goals of the project.

[vab9]

Dear colleagues,

we will clarify this issue with the Robert Koch Institute. They are the official entity that released the app in the respective app stores.

We will keep you updated as soon as we know more.

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

Glad to hear you're already working on this issue. I agree with @bmulholland that this is an urgent matter. Let's hope it gets resolved quickly!

[edouardlauer]

This problem about the app being only available on the german app store whether it is IOS or Android should be resolved quickly. When I hear the statement 'The best corona app in the world!' I've to LOL because only those on the german app store can download it. Clearly the politicians have dismissed to ask for an app that is available worldwide which would have made more sense. We're EU, Schengen, Open-Borders. No, we're still in the middle-age and Corona has shown this very clearly.
I've also the problem with the app being only available in the German store. I'm a luxembourgisch person living in Germany.

[BETEP-ok]

Can not support this issue more.

Using my Russian apple account for almost 10 years and have to stick to that as it is also major account for my family group.
Apple policy about local stores limitations with not possibility to side load local apps (like in this corona warn app case) just drives me crazy every time... !!!!

[christhomas]

Something I've been puzzled by, is that why it matters which app you install since the app doesn't use location and therefore any application, as long as you can read it, should be able to use the API and provide the required information since all it does is track proximity to other Bluetooth devices and all of this is handled by the phone software developed at a global level.

I understand why each country is restricted to one app because you have to name the health service of that country in order to be responsible for testing and making sure the testing is compatible with the technology on the phone.

But since the tech works in a global fashion across all phones, then shouldn't all countries have identical testing methods and use the same TAN/QR system for verification, etc, etc.

Then why does it matter what country I'm in? Does anybody know why?

[kallovsky]

Could we get an update on this issue @SebastianWolf-SAP? If it is really taking weeks to solve it, then I would go for the workaround and open a German account.

However, this is an important issue and should be solved asap!

[sonicalchemy]

This shouldn’t be a question. This is a legitimate issue for all of us non German residence. I want to install the app to protect my kids and I and I cannot. Retail as an priority issue and not a question. Please take this seriously as I and many others are at risk because of bad planning and to be told it is a question and not a legitimate issues is a bit condescending.

[charlesvestal]

As this isn’t an issue with the app code itself and the maintainers of this repo don’t appear to have direct control over this issue, perhaps we should also communicate with the App’s own Technical Hotline at [phone]

or RKI directly at

[email protected] / [phone]

[muescha]

I think that’s the telekom hotline with 1-day trained call agent working bees - I guess no one with technical expertise. I am Sure your complains are forwarded to /dev/null

[saschaholesch]

I tried the hotline before I thought of checking here. Indeed the problem was either not understood by the person talking to me or simply ignored. I expect the first. Using a German App Store account is just not possible for many of us.

I think the developers working on the application might have the best chances to get heard. I am surprised we don't hear more in the media about this large group of people being locked out of participating with the app -- as a result of an obviously conscious decision of the RKI.

[alneven]

Maybe it was fixed in the meantime?! Check the comment from Adel

[dewey]

Can't find it in the Austrian store, I only see Corona Warn Apps from a lot of other countries.

[kbobrowski]

for anyone who want to track whether it was fixed or where the app is available right now (it's for checking if the app is available in Play Store, but I guess it will be fixed at the same time as availability in App Store):

• open incognito tab (in case you are logged in with Google account right now)
• go to https://play.google.com/store/apps/details?id=de.rki.coronawarnapp&gl=DE
• change last two letters of above link to another country
  (e.g. https://play.google.com/store/apps/details?id=de.rki.coronawarnapp&gl=FR)
• if install button disappears then it means that app is not available in this country

[muescha]

@alneven where i can find the source of the screenshot?

[mhaid]

for anyone who want to track whether it was fixed or where the app is available right now (it's for checking if the app is available in Play Store, but I guess it will be fixed at the same time as availability in App Store):

* open incognito tab (in case you are logged in with Google account right now)

* go to https://play.google.com/store/apps/details?id=de.rki.coronawarnapp&gl=DE

* change last two letters of above link to another country
  (e.g. https://play.google.com/store/apps/details?id=de.rki.coronawarnapp&gl=FR)

* if install button disappears then it means that app is not available in this country

Correct, you can also check the availability of the app in the AppStore via a similar principle:

• German AppStore: https://apps.apple.com/de/app/corona-warn-app/id1512595757
• Austrian AppStore: https://apps.apple.com/at/app/corona-warn-app/id1512595757
• UK AppStore: https://apps.apple.com/gb/app/corona-warn-app/id1512595757

If the website tries to open iTunes, it's not available:

Right now the app is not yet available in other countries AppStores (as far as I checked).
Not sure if it works on an Apple OS as well, just tried it on Windows.

Prove of concept for the above methode with the App NINA:

• German AppStore: https://apps.apple.com/de/app/nina/id949360949
• Austrian AppStore: https://apps.apple.com/at/app/nina/id949360949
• UK AppStore: https://apps.apple.com/gb/app/nina/id949360949

[sonicalchemy]

for anyone who want to track whether it was fixed or where the app is available right now (it's for checking if the app is available in Play Store, but I guess it will be fixed at the same time as availability in App Store):

• open incognito tab (in case you are logged in with Google account right now)
• go to https://play.google.com/store/apps/details?id=de.rki.coronawarnapp&gl=DE
• change last two letters of above link to another country
  (e.g. https://play.google.com/store/apps/details?id=de.rki.coronawarnapp&gl=FR)
• if install button disappears then it means that app is not available in this country

Still not on Apple US. Apple seems slower with the roll out.

[dewey]

@sonicalchemy It's not an Apple Problem. It's Robert Koch Institute problem, they have to click some buttons.

[bmulholland]

@SebastianWolf-SAP Are there any updates, or any sense of timeline? What considerations are holding this up? Given it really is a matter of health, and even a chance of death, should we be considering workarounds that cost us money in canceled app store subscriptions?

Sadly I think the PR window has passed. Are there any ideas on the team on how to improve adoption in the expat community, who now have the perception that they simply cannot use the app?

[amandadebler]

@bmulholland For Americans associated with the Army and Air Force, there's AFN (Armed Forces Network) radio and TV, along with various post-wide email lists. Also, English-speaking churches, which tend to have very international congregations.

But don’t bother with any of those until the app is in the US App Store, findable under “corona app Germany” and similar, because if I’m hesitant to try the account-switching trick, there’s no way in heck 99% of that crowd will even consider it.

[salehtahini]

Does it seriously take more than a week for the RKI to tick a checkbox?
What is the downside of making the app available without a region lock? This issue should have been solved 7 days ago.

[ileitch]

This is a bit embarrassing for the RKI now, especially as we've an outbreak in NRW mainly involving _foreign_ factory workers.

[bmulholland]

I wish there was someone at RKI that we could contact directly; it seems that no one is monitoring this issue at all.

[amandadebler]

@ileitch @bmulholland Other than pinging the RKI publicly on Twitter and the like, perhaps trying to make Drosten & Co (“Corona Update” from NDR) aware of this gap?

[treysis]

@amandadebler

but I really have no interest in potentially losing access to my bank accounts back in the US by switching over to the German App Store [...]

True. But also, why are your US banks restricting their apps to the US AppStore?

[kennethmac2000]

@SebastianWolf-SAP Can you ask someone from RKI to comment directly in this thread?

The open way in which Corona-Warn-App has been developed is rather spoiled by the addition of this 'middleman' that seems to be playing by rather different rules.

[spaetow]

Which middleman would that be, @kennethmac2000? SAP (who @SebastianWolf-SAP works for) is the sub-contracted development house, but RKI remains the contracting party and as such the responsible party for publishing the app to the app stores. Sure, there are internal processes to be followed here, and I suspect that RKI may not necessarily want to have to process data for non-residents (other than those who have travelled inside Germany and who may have exposed or been exposed to infected people). There are legal issues at play.

However, I do agree with others that the German app should be available in other country app stores for precisely the reason that people will start travelling and that incidental contacts will be helpful for tracking potential infection crossovers. I've contacted the RKI and requested that their PR team start poking their internal folks to get the app published on other app stores for that reason.

Ich hoffe ich trete da niemandem auf die Füße (besonders dir, @SebastianWolf-SAP)... aber wenn die verschiedenen Airlines jetzt wieder Flüge starten, muß jemand dem RKI das klarmachen!

[alneven]

I think it was a good idea to ask RKI on twitter about this. One by one. Everyone. ;-)

[sonicalchemy]

I have already tagged RKI in this on Twitter. This is really insensitive to not have done this parallel in the development phase.

[DaGaMs]

Have done so - twice. No response, no acknowledgement, no fix. I honestly don't think anyone on the RKI side is actually monitoring their twitter feed. Seems to be more of an announcement account rather than an interactive one. However, since there hasn't been any update so far, I have the strong feeling that they deliberately don't want to put the app in other app stores, for whatever reason that might be :-(

[christhomas]

What’s the expression about not attributing to malice what can more reasonably be attributed otherwise. Let’s get their email and send requests to that instead?

[sonicalchemy]

I would say lack of planning a fore thought. Not thinking who the app is for ultimately.

[treysis]

Paired with failing to understand what country restrictions in App-Stores actually mean and how they have no real meaning except for marketing reasons.

[kennethmac2000]

I suspect that RKI may not necessarily want to have to process data for non-residents

While having an Apple ID that is linked to the German App Store is a useful proxy for German residence, it hardly guarantees it. Therefore, RKI are no doubt already processing data for non-residents. And what's the big deal?

other than those who have travelled inside Germany and who may have exposed or been exposed to infected people

If they are going to process data for certain types of non-resident, what is the problem with processing data for any type of non-resident?

[kbobrowski]

No clue what might be the issue with RKI - Federal Government has no problem to publish many apps in foreign App Stores (this is for Android but same applies to iOS):

[BETEP-ok]

No clue what might be the issue with RKI - Federal Government has no problem to publish many apps in foreign App Stores (this is for Android but same applies to iOS):

you forgot the Ausweis app for NFC reading of the ID card. (AusweisApp2)

[SebastianWolf-SAP]

Dear colleagues,

finally we have an official statement from the Robert Koch-Institute which is also reflected in our FAQ: https://www.coronawarn.app/en/faq/#international and https://www.coronawarn.app/de/faq/#international

After a detailed examination of the situation it was determined that for legal reasons any publication of the Corona-Warn-App in App Stores outside of Germany is currently only possible after a case-by-case assessment. Legal consultations have shown that in the case of publication in international App Stores, the law of the respective country must be considered and applied to the Corona-Warn-App. This applies in particular to data protection, any necessary claims for information by local authorities and other contractual and consumer protection regulations.

The Robert Koch-Institute as publisher of the app will trigger this check for the respective countries and release the app after successful legal examination. In a first step, the RKI will release the app for some European countries. These are: Netherlands, Belgium, Luxembourg, France, Austria, Czech Republic, Poland, Denmark, Romania and Bulgaria. It may still take a few hours to a few days until the app is available for the individual countries. We kindly ask you for your patience.

More countries are currently being checked and will be released in the App Stores step by step. The Robert Koch-Institute asks for your understanding that it cannot provide any information on specific countries and the status of their release during the ongoing review process.

As said above now we have the following countries:

• Netherlands
• Belgium
• Luxembourg
• France
• Austria
• Czech Republic
• Poland
• Denmark
• Romania
• Bulgaria

We will close this issue, but we will keep one issue open in our backlog repository, this is https://github.com/corona-warn-app/cwa-backlog/issues/9. See the comment https://github.com/corona-warn-app/cwa-backlog/issues/9#issuecomment-648745301 how to show your support for additional countries.

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

[BETEP-ok]

Dear colleagues,

finally we have an official statement from the Robert Koch-Institute which is also reflected in our FAQ: https://www.coronawarn.app/en/faq/#international and https://www.coronawarn.app/de/faq/#international

After a detailed examination of the situation it was determined that for legal reasons any publication of the Corona-Warn-App in App Stores outside of Germany is currently only possible after a case-by-case assessment. Legal consultations have shown that in the case of publication in international App Stores, the law of the respective country must be considered and applied to the Corona-Warn-App. This applies in particular to data protection, any necessary claims for information by local authorities and other contractual and consumer protection regulations.
The Robert Koch-Institute as publisher of the app will trigger this check for the respective countries and release the app after successful legal examination. In a first step, the RKI will release the app for some European countries. These are: Netherlands, Belgium, Luxembourg, France, Austria, Czech Republic, Poland, Denmark, Romania and Bulgaria. It may still take a few hours to a few days until the app is available for the individual countries. We kindly ask you for your patience.
More countries are currently being checked and will be released in the App Stores step by step. The Robert Koch-Institute asks for your understanding that it cannot provide any information on specific countries and the status of their release during the ongoing review process.

We will move this issue to cwa-backlog and add comments for each country or set of countries which are added over time. As said above now we have:

• Netherlands
• Belgium
• Luxembourg
• France
• Austria
• Czech Republic
• Poland
• Denmark
• Romania
• Bulgaria

We will close this issue, but we will keep one issue open in our backlog repository, this is corona-warn-app/cwa-backlog#9. See the comment corona-warn-app/cwa-backlog#9 (comment) how to show your support for additional countries.

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

how about the other countries?
See in Wikipedia: Germany is home to the third-largest number of international migrants worldwide,[10] In 2016, around 23% of Germany's population do not hold a German passport or are descendants of immigrants.[55]
reference: https://www.destatis.de/DE/Presse/Pressemitteilungen/2017/08/PD17_261_12511.html

https://en.wikipedia.org/wiki/Demographics_of_Germany#Foreign_nationals_in_Germany

most of the western part of the country contain hell lot of people with immigration background:

https://upload.wikimedia.org/wikipedia/commons/8/8e/Germans_without_a_migrant_background_%282016%29.svg

[treysis]

Sorry for being a bit blunt, but I feel the urgent need to point that out:

How can your legal team not understand that AppStore countries have nothing to do with actual restriction? It has been mentioned several times across all threads and on different platforms. Do they even read the discussion here?

Furthermore, the whole process aside from actual programming seems very intransparent. You should publish the analysis on why this restriction is necessary. To most it still doesn't make any sense and it seems like RKI is trying to hide something. Don't you see how you're supporting all people that are against this app? This is not limited to the availability issue, but the general way community requests are handled. Most contributors here want the app to succeed and are using their spare time to comment. But they often just get stonewalled, as if you're trying to hide or avoid any negative PR. There is a term for that: kill hte messenger.

[dewey]

Sorry for being a bit blunt, but I feel the urgent need to point that out:

How can your legal team not understand that AppStore countries have nothing to do with actual restriction? It has been mentioned several times across all threads and on different platforms. Do they even read the discussion here?

Agreed. If it has to be restricted it should be done with other geofencing methods not the country of the app store.

[SebastianWolf-SAP]

Dear colleagues,

just to be crystal clear: It's the legal team and the responsible people at the Robert Koch-Institute who make the decisions. We can only present the results and offer a channel to raise your voice concerning additional countries. Please see https://github.com/corona-warn-app/cwa-backlog/issues/9#issuecomment-648745301 as already mentioned above.

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

[kennethmac2000]

just to be crystal clear: It's the legal team and the responsible people at the Robert Koch-Institute who make the decisions.

Then can't you ask the responsible people at RKI to submit themselves to scrutiny in this thread? That's how good decisions are made.

Let's have a few people test and challenge their point of view and see if they have good arguments to defend their position.

[SebastianWolf-SAP]

Dear @kennethmac2000,

well, I have been investing a considerable amount of my working time over the last days on working together with the responsible people at RKI and the respective legal team. I'm afraid that's the best we can get for now...

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

[bmulholland]

@SebastianWolf-SAP Having some experience working with large organizations and lawyers, I agree that what you've come up with is a pretty good compromise - nice work. I think everyone (even the lawyers!) can agree that it isn't ideal, but at least there's a path forward, and it's great that progress is being made, however slowly. I'm sure you're using demographic data to prioritize countries, as well as our Github likes, and that's great.

@kennethmac2000 @dewey @treysis Actually I completely agree with you that the App Store country is not the real issue, but the reality is that there's no chance that the lawyers for a large company or the government will come on here to discuss. There is a path forward, and we can even have a say in the prioritization, and that's surprisingly helpful, all things considered.

[SebastianWolf-SAP]

Sorry for being a bit blunt, but I feel the urgent need to point that out:

How can your legal team not understand that AppStore countries have nothing to do with actual restriction? It has been mentioned several times across all threads and on different platforms. Do they even read the discussion here?

We addressed exactly these points to the responsible people at the very beginning, including an estimation how many people living in Germany are affected. Everything was and is on the table and the RKI needed to decide on country by country because of legal reasons (see our FAQ).

Furthermore, the whole process aside from actual programming seems very intransparent. You should publish the analysis on why this restriction is necessary. To most it still doesn't make any sense and it seems like RKI is trying to hide something. Don't you see how you're supporting all people that are against this app? This is not limited to the availability issue, but the general way community requests are handled. Most contributors here want the app to succeed and are using their spare time to comment. But they often just get stonewalled, as if you're trying to hide or avoid any negative PR. There is a term for that: kill hte messenger.

I can only underline that we as the Open Source Team are as well nothing more than messengers here and we don't hide anything with respect to the background. Quote:

Legal consultations have shown that in the case of publication in international App Stores, the law of the respective country must be considered and applied to the Corona-Warn-App. This applies in particular to data protection, any necessary claims for information by local authorities and other contractual and consumer protection regulations.

Once again: The decisions are made at RKI and we do our best to channel the feedback of the community back to them. We have done that repeatedly and this is the result.

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

[bmulholland]

@SebastianWolf-SAP I wanted to make a second comment to thank you and the team for your hard work behind the scenes, as well as your transparency and communication on here. I'm sure it's not easy on many fronts, and we all appreciate your efforts to get this app out as soon as you have. Notably, for instance, Canada's version won't be available until next month, and is far less transparent - there's certainly no Github repos for it. Great work everyone, thank you.
(And please pass this on :) )

[inforsgit]

I'm 100% with you @bmulholland - massive thanks to @SebastianWolf-SAP for keeping us informed on this and for following it up - I'm so grateful to see actual action being taken in response to things raised here. Of course the perfect solution would be complete availability in all app stores but I am far from an expert here and I understand from my own job that things are not always as simple as the public would expect.

So thank you, thank you, thank you for all of the engagement, long may it continue!! As a reminder of what @SebastianWolf-SAP said - either add your country here https://github.com/corona-warn-app/cwa-wishlist/issues or get voting if your country is already there - that way we can continue to drive improvement :)

[kennethmac2000]

Dear @kennethmac2000,

well, I have been investing a considerable amount of my working time over the last days on working together with the responsible people at RKI and the respective legal team. I'm afraid that's the best we can get for now...

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

Thank you for those efforts, even if I disagree with the outcome. :)

[alneven]

literally data security and old habits will kill once this country ;-) or its already on the way?

[kbobrowski]

It's not a fault of anyone at SAP / RKI, I guess the procedures are formulated this way, but it seems overly cautious to be so concerned about "breaking the law" of another country in this situation. It's beyond obvious that nobody would sue Federal Government for releasing COVID app "on the territory" of foreign country, probably most of the countries do not even consider releasing something in worldwide App Store as releasing it "on our territory". I wish it would simply be possible to click the button "release worldwide" and worry about consequences later (which beyond any doubt would never come). I have a feeling that Italian Ministry of Health who released the app worldwide is not concerned at all about impending court case at ECJ. But I'm happy some moves and analysis are being made, let's hope it will conclude soon.

[treysis]

probably most of the countries do not even consider releasing something in worldwide App Store as releasing it "on our territory".

Exactly this. AppStore country doesn't have any legal implications. Unless contracted otherwise. But since all parties agree, there is no such contractual binding.

[kennethmac2000]

probably most of the countries do not even consider releasing something in worldwide App Store as releasing it "on our territory"

I can see how you can construct an argument that such a release could be so construed, but to lean on that argument is at the extreme end of cautious. How much precedent is there for countries, or residents of those countries, scraping the App Stores for apps which are in violation of the law in those countries? Supposing Corona-Warn-App was considered to be such an app, in which court or tribunal would anyone even be able to take any action against RKI or the German federal government?

Part of the job of being a lawyer is to balance technical possibility against realistic probability and advise accordingly. Especially given the current public health situation, this decision seems like an abundance of caution which is unmerited, and ultimately is putting legal perfection above human health.

[christhomas]

Am I misunderstanding something here? The problem is that this app has the ability to communicate with the RKI and it's not legal for them to process data from people in other territories?

Doesn't this app just gather Bluetooth identifiers and give it's own to other apps on request. If I'm using this application in Brazil, I'm merely exchanging Bluetooth identifiers with others.

Then I'm downloading an apple/google managed database of identifiers into my phone for matching against those that I store.

How does the RKI come into this if I'm merely using this functionality alone? Isn't that a globally functional system which doesn't require any country nor infrastructure to operate?

I'm deliberately excluding the testing and verification stages of being infected, etc, etc. Let me split that issue apart for a second.

But have I got this correct so far?

[kbobrowski]

@kennethmac2000 good points, the only realistic option I see for other countries to retaliate against Federal Government for releasing app "on their territory" (meaning in corresponding App Store) is through international sanctions, or trying to raise the issue at European Court of Justice / United Nations forum. I highly doubt it would even worsen international relationships even in the slightest, actually the only result of releasing it worldwide seems to be improvement of international relationships, since it's a nice gesture to allow foreign citizens often travelling / working in Germany to participate in contact tracing system (which also improves safety in foreign countries, as these returning foreign citizens would know their exposure status).

@christhomas that's right, there is no data exchanged except for downloading random IDs of infected people (which is actually available worldwide already, you can query this endpoint wherever you are, it's not restricted only to Germany).

[christhomas]

Well then I don't see why this app can't be launched worldwide. If I'm travelling to Africa, it'll still work. Or I'm vacationing in Thailand and I find an alert. Can't I just go to a Thai clinic, get tested, then use the same TAN/QR system in that country to upload my results and trigger an alert for other people?

I always thought that was the endgame. I mean, I understand that the RKI is responsible for testing, therefore it has to process your data, but to be tested by the RKI, I would have to be in Germany. If I'm in Germany and I get tested, I can give consent for the RKI to put my results online and use the app to validate the request.

Then all that matters if that I trust each country to upload the correct data to the system and I guess I'll have to judge on a case by case basis whether that country will treat my data securely. Or whether I will take a risk and let them copy my data in exchange for validating my results. I guess I'll have to make a judgement call which is more important in that scenario.

I can't see this data being very valuable to other people and maybe my test result is more valuable than whatever perceived risk there is.

But surely I would have to make that judgement, based on the scenario given. Maybe I'm triggered with an alter whilst in Argentina. Then what?

So my understanding of the app was that it would work anywhere, the system of TAN/QR is safe enough to encrypt whatever data and decrypt it, depending. Then where is the problem?

Seems the problem is just on my shoulders to validate personally whether I trust the healthcare provider giving me the test in whatever country I'm in. That's a problem tech can't solve. Maybe I don't trust the RKI either, then what? You know what I mean?

[kbobrowski]

@christhomas I think the problem of being able to submit your random IDs after you were diagnosed in another country is a great point - but I can understand that getting this process going would require more effort as RKI would have to established the trust with foreign laboratories.

Regarding just notifying you that you were in contact with infected - you are right that app will work worldwide - if you travel to Africa after spending some time in Germany, and someone with whom you were in contact in Germany tests positive and uploads Diagnosis Keys to RKI you will still get alert, no matter where you are. This is because Diagnosis Keys are available worldwide.

The unfortunate part here is that even if you are in Germany all the time, but happen to have foreign App Store, there is no way right now to use the app and receive exposure notification - and this part of functionality does not involve any processing of your data as everything happens on the phone.

[christhomas]

So it's clear that every part of this app will work worldwide, including downloading of infected identifiers and uploading your own in case you are deemed infected. Because all of this communicates with apple/googles worldwide infrastructure and it doesn't matter where you are or which app you downloaded. They are all the same when it comes to this side of the functionality. Apple/Google approve the apps depending on their submissions processes.

So that's clear.

The problem is the test results phase.

So from what I understand, you get yourself tested and you get a certificate which needs to be input/scanned into your phone to approve the upload of the data. The lab, uploads the data, encrypted against the information on the certificate to the global apple/google infrastructure.

That data can't be unlocked without my consent. Which is why I have control over the process. So I have this TAN/QR code system to enter the decryption data.

If the lab is giving me a certificate needed to decrypt the data, the lab is going to upload the encrypted version of it. And to decrypt the data I need to input/scan the data on the certificate I get in my hand when I am tested. Then what part of this requires the RKI to do anything at all?

The lab controls the upload process, they generate the decryption certificate themselves and give it to me. It could be any lab doing the testing, as long as I trust them and as long as I scan the code, then my diagnosis is uploaded and decrypted.

To prevent unauthorised labs from uploading bogus data, a lab key + client key, could be used to ensure the final encryption secret is only possible from authorised labs. Such as those from government institutions, same as the approval process for the apps themselves have to be authorised by google. The lab registers it's keys with apple/google infrastructure.

What part did I miss out? Seems fairly simple.

[kbobrowski]

@christhomas

So it's clear that every part of this app will work worldwide, including downloading of infected identifiers and uploading your own in case you are deemed infected. Because all of this communicates with apple/googles worldwide infrastructure and it doesn't matter where you are or which app you downloaded. They are all the same when it comes to this side of the functionality. Apple/Google approve the apps depending on their submissions processes.

There are two parts in play: Google / Apple framework which exists only on your phone, and with which the app communicates. This communication happens only locally on the phone. There is also RKI / Telekom infrastructure which serves as distributor of random IDs of infected people, and provides services to deliver test result and to accept uploaded random IDs.

So from what I understand, you get yourself tested and you get a certificate which needs to be input/scanned into your phone to approve the upload of the data. The lab, uploads the data, encrypted against the information on the certificate to the global apple/google infrastructure.

That's not exactly how it works, there is no global Apple/Google infrastructure in play. The lab uploads data to RKI / Telekom infrastructure, and app communicates over the internet only with the latter.

That data can't be unlocked without my consent. Which is why I have control over the process. So I have this TAN/QR code system to enter the decryption data.

You can always access your data yourself, without a need to have valid TAN/QR code. Perhaps you'd need to have jailbroken iPhone or rooted Android to do it, but in principle you are the master of your device and can extract whatever information you want anytime.

The lab controls the upload process, they generate the decryption certificate themselves and give it to me. It could be any lab doing the testing, as long as I trust them and as long as I scan the code, then my diagnosis is uploaded and decrypted.

Diagnosis Keys are not encrypted (although they are in a form which mathematically ensures your privacy), and in principle you can try to upload them anytime to RKI / Telekom infrastructure. But together with this upload you have to upload valid TAN, which you receive from RKI after positive test, otherwise these Diagnosis Keys will be rejected by the server. So this is where RKI comes it to play - you can upload Diagnosis Keys to RKI / Telekom infrastructure only after being approved by RKI to do so. Have a look at https://github.com/corona-warn-app/cwa-documentation/blob/master/solution_architecture.md#introduction

What makes this App Store availability problem especially confusing is that there is no real personal / health data processed by the app. I'm not sure what other counties could even complain about if it is deployed in "their country's App Store".

We can at least be happy that Google / Apple did not have such considerations with deploying Exposure Notifications framework worldwide, it would be huge problem if they suddenly decided to push update only to US App Store until they can discuss with each country case-by-case if it would be ok to also push the update there. And I guess it's much easier to sue / retaliate against Google / Apple than against German Federal Government.

[jasonkmoore]

My main point: for non-EU Android users - a simple solution is to create a new (perhaps temporary) Google account and register it in Germany. Doing this allows you to retain your existing account stuff and also get the app. I ran into the same problem when I arrived in Germany; I took the awkward - long swab to the very back of the sinus test - at the airport and was given a paper with a QPR code, but was unable to register it to view my results. I knew I could change my Google Play account country, but did not want to deal with the "only move once a year" hassle and lose access to US apps (e.g. like bank apps) or subscription services. In the end, the simple solution was to:

1. Create a new Google Account
2. Change the Google Play Country for the new account.
3. Point to your new account in Google Play (from the link in step 2, click on for steps on how to do this)
4. Download the COVID-Warn-App.

I now have a DEU google account that has the COVID-Warn-App. I was able to scan my QPR and receive my results ("diagnosis: SARS-CoV-2 Negative" -yay) and I can now participate in the anonymous contact notification.

[dret]

still not available for non-german app store users it seems? that's really bad and has real-life consequences.

[tkowark]

@dret the app is available in a variety of international stores https://www.coronawarn.app/de/faq/#international

[treysis]

@dret You can use my python script at https://github.com/treysis/playstore-country-check to check the availability for certain countries.

[duncdrum]

@tkowark i don’t see why this issue should be unpinned, there are still many country app stores that do not serve the app. It seems a bit much to expect any person arriving in Germany from one of these countries to find and follow a closed issue on the source code repo.

Pinning it would certainly help

[tkowark]

That's all done in the wishlist repository, now. The store availability is just not an issue for the repository concerned with technical aspects of the app and also needs to be solved for both apps centrally by the publisher and their legal councils.

[tkowark]

And the issue to follow now is this one here: https://github.com/corona-warn-app/cwa-backlog/issues/9