covidwatchorg / covidwatch-ios-en Goto Github PK

Figma: https://www.figma.com/file/36hmE4QIKKGXTcLBhHGzve/Covid-Watch-App-v4-dev?node-id=0%3A1

Execution plan

• Define region data structure
• Set region read-only data HTTPS endpoint
• Update Splash screen
• Add Region Selection screen
• Update Onboarding and Setup screens
• Update Home screen
• Update Menu screen
• Update Possible Exposures screen: expandable rows
• Update Reporting screens (Careful, spec not final)

Note: There are several unaddressed comments and change requests in the Figma file.

https://www.notion.so/covidwatch/Permission-Portal-V3-Requirements-151b79bae1f846ae90155d5dcbb9f613#8ce3604852ec410f8051ea0c1b5d373f

Does this project support any type of third party contributions? In my specific case, I am thinking of UI contributions. I am a student/researcher at the University of Arizona and so am using this app, and I'd like to contribute in terms of how the UI could be improved, particularly as related to possible exposure notifications and the data that is presented.

Unfortunately, given that I am just a random person, I don't have the proper entitlements to run this app even in the simulator to test changes, so I'm hoping there may be another way to contribute.

https://www.notion.so/covidwatch/Org-Admin-App-Covid-Watch-Product-Requirements-5b19102574fc475d9f08de468154aa00#2a1d6876d7d04e8f9ec75db035c7f965

Should build on what was delivered in v2

Also requires backend work and technical design to figure out storage of data, and how we initially report (can be just pulling from the DB initially)

Also requires security review for privacy concerns.

https://www.notion.so/covidwatch/Permission-Portal-V3-Requirements-151b79bae1f846ae90155d5dcbb9f613#fdd9d198d23a44c8bb4e6b33e1859ceb

The Data Protection entitlement is not enabled within the Xcode project for the App. When enabled, the Data Protection capability will automatically protect all files created by the App with the strongest Data Protection class, NSFileProtectionComplete; this protection class ensures that the file is encrypted with the user's passcode whenever the device is locked.

As described in the iOS Security Guide in the "Data Protection" section, the default Data Protection class for files since iOS 7 is NSFileProtectionCompleteUntilFirstUserAuthentication, which only encrypts the user's data until the very first time they unlock their device:

Enable the Data Protection entitlement in the Xcode project configuration of the App. As shown in the screenshot, this setting is available in the "Capabilities" tab within Xcode.
Because the entitlement will cause iOS to encrypt all the App's files when the device is locked, it might cause problems if the App tries to access its files while running in the background (ie. when the device might be locked). To work around this problem, App can lower the protection level to NSFileProtectionCompleteUntilFirstUserAuthentication for the specific files that need to be accessed while in the background, as described in the Encrypting Your App's Files article within the Apple documentation.

Lastly, the applicationProtectedDataWillBecomeUnavailable: and applicationProtectedDataDidBecomeAvailable: App delegate methods can be used to manage the App's access to protected files.

post v3
Requested by Bermuda Dept of Public Health
As an end user, I can see how recently I was in contact with another user (i.e., when I last logged an RPI) so that I can see that my app is working correctly.
This will also build excitement and engagement with technical users.
We'd want to bucket the times and not provide an exact time, but something like "In the last 10 minutes", "last Hour", "in the last 24 hours", "in the last 3 days", "In the last 7 days", "Greater than 7 days".

Custom keyboards should be disabled as they have little value for this app and they also have security risks.

// To be added to the App's UIApplicationDelegate
- (BOOL)application:(UIApplication *)application shouldAllowExtensionPointIdentifier:(UIApplicationExtensionPointIdentifier)extensionPointIdentifier
{
    // Disable third-party keyboards on iOS 8+
    return NO;
}