For Immediate Release

Contact:
Brooke Scheffler, Governor’s Office
bscheffler@utah.gov
801.674.0132

Andie Weissman, Healthy Together

andie.weissman@archetype.co
908-956-2807

State of Utah Releases “Healthy Together” Beta App

New Mobile Platform Provides Symptom Tracking, Connects Users with Testing,
and Helps Public Health Trace Spread of COVID-19
SALT LAKE CITY (April 22, 2020) - Today, Gov. Herbert announced the public beta testing
phase for Healthy Together, a symptom checking mobile application that helps augment current
contact tracing efforts. The app is designed to help Utahns work together in concert with public
health officials to slow the spread of COVID-19.

In conjunction with State efforts to continue increasing testing capacity for COVID-19, Healthy
Together will increase the ability of health workers and state officials to trace and contain
COVID-19. Healthy Together’s mobile application and analysis technology will support Utah’s
contact tracing plan by giving state health workers a faster and more accurate picture of where
and how the virus is spreading.

“Our Utah Department of Health is focused on targeted ways we can trace the spread of
COVID-19,” Gov. Herbert said. “The more Utahns choose to use this application, the more
clearly our public health teams will be able to see exactly where, and whom the virus is
infecting. In time, this will allow us to address outbreaks with a focused approach instead of
widespread stay-at-home directives. This app will give public health workers information they
need to understand and contain the pandemic and help Utahns get back to daily life.”

Utahns can download and test the first iteration of the mobile application through the Google and
Apple app stores starting today.
“Testing and contact tracing are crucial to any public health response, and especially to a
pandemic response,” said Dr. Angela Dunn, state epidemiologist. “I am hopeful this app will
provide our hard-working contact tracing teams with even more information to help them do
their jobs effectively and efficiently.”

Healthy Together, a solution developed by the founders of Twenty, prompts users to take a daily
symptom assessment developed in partnership with the Utah Department of Health and
integrated into the mobile application. When the app identifies someone in need of COVID-19
testing, it helps connect them with testing in their area. Test results are also available through the
app.

When an individual tests positive for COVID-19, they are contacted by a public health worker,
who works with them to identify close contacts who could have potentially been exposed to the
virus. App users who choose to share their data will help Utah public health workers understand
where they may have spread the virus if they test positive. This app will be an important tool in
the fight against COVID-19. All personal information in the app is anonymous to everyone
except public health.

“Developing a platform that can augment and amplify the existing efforts of healthcare workers
to control the spread of this pandemic is a tremendous, yet critical challenge,” said Jared Allgood
Co-Founder & Chief Strategy Officer at Twenty. “Healthy Together was designed to increase
both the accuracy and scale of the information available for analysis, while providing privacy
and security to the data of every person who participates in Utah’s fight against COVID-19.
We’re grateful to help and committed to Utah’s effort to eliminate this threat and re-open our
businesses, neighborhoods and communities safely.”

The app is free to download, and use of the app is strictly opt-in and voluntary. Users own their
location data and can delete it at any time. ​Personal data shared with public health officials will
be used solely to combat COVID-19. ​Location data will be automatically deleted every 30 days,
and symptom data will be automatically de-identified after 30 days. Healthy Together complies
with State requirements for data security and encryption.

You can download Healthy Together in your app store, from coronavirus.utah.gov, or from
healthytogetherutah.com.

###
 HEALTHY TOGETHER PRIVACY POLICY

OUR CORE PRINCIPLES

This Privacy Policy explains how you may share personal information with Healthy Together, and how we receive,
use, disclose, and otherwise process your personal information. We are committed to putting people in control of
their information and we believe in the following core principles:

● We'll only ask you to share the information needed to fulfill the mission of Healthy Together.
● We’ll be clear about what information you’re choosing to share.
● We’ll never share your name, phone number or any other information that specifically identifies you with
other Healthy Together users.
● We’ll be open and clear about why features exist, what they do, and how they use your information.

OUR MISSION
Healthy Together is a tool developed in coordination with epidemiologists and public health officials to help stop
the spread of COVID-19. It uses information that you share through the app along with third-party data to help
U.S. local, state and federal governments and public health organizations identify COVID-19 transmission networks
and deploy testing and containment efforts to research and combat the pandemic.
If you choose to share information through Healthy Together, the data you share will help further COVID-19
response efforts by allowing public health workers to conduct contact tracing more accurately, more effectively
and at a larger scale.
Healthy Together:

● Allows people to log and share their symptoms, diagnoses, and real-time location data with the State of
Utah and other U.S. local, state and federal government organizations and public health organizations;
these government and public health organizations have committed to using this information solely for the
purpose of COVID-19 response efforts.
● Alerts people if they have been exposed to a COVID-19-affected individual and provides instructions on
how and where to get tested.
● Provides U.S. local, state and federal government officials and healthcare workers with access to
real-time data of probable infection hot-spots and information on individuals who may have been exposed
to COVID-19, so that they can more surgically deploy testing, contact tracing procedures, and other
medical efforts.
● Retains location history for no longer than 30 days after you share it with us.
● Retains personally identifiable health-related information that you share with us no longer than 30 days
after you provide it. After 30 days, we will de-identify this information by removing any details that
directly identify you, such as your name and phone number.
● Puts you in control of your information by letting you request deletion of all personal information we have
received through the app at any time.

Your use of Healthy Together is voluntary. You can at any time direct us to delete your personal information
by choosing to do so within the app, or by emailing your request to info@healthytogether.io.
We may need to modify our privacy practices to comply with legal requirements, such as court orders, subpoenas
or investigations.

TYPES OF PERSONAL INFORMATION THAT MAY BE SHARED WITH US

When you use Healthy Together, we will ask you to share certain personal information with us. We will also receive
information from U.S. local, state and federal government organizations, and collect certain technical, device and
usage information from your device.
We may receive:

● Registration and Profile Information. We may receive information from you when you register to use
Healthy Together. That information may include, among other things, your full name, phone numbers,
and device identifiers.

● Contact List. If you choose to share your mobile device contacts or address book with Healthy Together,
we will store your contacts or address book information, including the phone numbers and names of your
contacts, to enable you to invite your contacts to Healthy Together and help facilitate your user
experience.

● Customer Support Information. We will store the contact information you provide to our customer
support personnel, and information about your use of Healthy Together. We will also store the
communications you have with us and any information contained in those communications.

● Device, Technical and Usage Information. When you access Healthy Together, we collect information
about your mobile device or computer system, including MAC address, IP address and mobile device ID.
We also generate usage statistics about your interactions with Healthy Together. This information is
typically collected through the use of server log files or web log files, mobile device software
development kits and tracking technologies like browser cookies to analyze certain types of technical
information. Some of the cookies Healthy Together places on your computer are linked to your user ID
number. When you respond to communications we send you, we may use automated technology to
understand how you interact with the communications. You can usually remove or reject browser
cookies through the settings on your browser or device. At this time we do not recognize automated
browser signals regarding tracking mechanisms, which may include ”do not track” instructions.

● Precise Geo-Location and Location History. When you use Healthy Together, you may choose to share
with us precise geo-location information using iOS and Android location services. These services may use a
combination of GPS, WiFi, Cellular, Bluetooth, and IP address to detect and triangulate your location. You
can stop the sharing of location information at any time by changing the preferences on your device. All
geo-location data which you share with us will be deleted within 30 days of collection, subject to our
legal obligations.

● Health-Related Information. Through your use of Healthy Together, you may choose to submit personal
information about yourself, such as your approximate age, as well as your pre-existing conditions,
symptoms, COVID-19 test status, and treatment details. We will remove personal identifiers from any
health-related information you share with us within 30 days of sharing, subject to our legal obligations.

The State of Utah may also provide us with certain health-related information, including COVID-19 test
results, which we may use, in conjunction with real-time location data that users choose to share, to
alert individuals when they may have been exposed to individuals who have tested positive for COVID-
19. If a user has been exposed to COVID-19, this information may be shared with government officials
and healthcare workers to help augment contact tracing efforts or coordinate the COVID-19 public
health response. However, we will never disclose to other Healthy Together users the name or phone
number of individuals who have tested positive for COVID-19, or any other details that directly identify
these persons
PRIVACY BY DESIGN AND DATA MINIMIZATION
We are committed to putting people in control of their information:

● Will delete location history within 30 days of recording the location, except when applicable legal
requirements mandate a longer retention period.
● We will retain personally identifiable health-related information that you share with us no longer than 30
days after you provide it, except when applicable legal requirements mandate a longer retention period.
After 30 days, we will retain, use and share limited, de-identified health-related information only for
COVID-19 response efforts or other public health or research purposes.
● To de-identify health-related information, we disassociate it from data elements that specifically identify
you, such as your name and phone number; we will instead maintain this health-related information in
conjunction with a random ID that we generate.
● We will not attempt to re-identify health-related information after we de-identify it, and have
implemented policies prohibiting re-identification.
● We will use and share de-identified health-related information only in connection with the COVID-19
response efforts or other public health or research purposes; if we share this information with third
parties, such as researchers, we will prohibit them from attempting to re-identify the information.
● You can at any time direct us to delete all of the personal information we have received through Healthy
Together by electing to do so within the app or by emailing us at info@healthytogether.io; if you request
deletion, we will delete all of your personal information received through Healthy Together from our live
systems and applications, unless we are prohibited by law from doing so. We will delete any personal
information we maintain on back-up media in the ordinary course of business.

HOW WE USE NON-HEALTH-RELATED INFORMATION

Other than health-related information, which is used for the limited purposes described in this Privacy Policy, we
use the information we receive:

● In connection with COVID-19 response efforts or other public health or research purposes.
● To operate Healthy Together.
● For internal business purposes that are necessary, reasonable, or appropriate to operate the business
functions that support the platform, such as for quality control and platform improvement, and to provide
technical support and respond to user inquiries.
● To enable user communications. If you have chosen to synchronize all or portions of your mobile device
contacts with Healthy Together, you may choose to initiate SMS notifications to your friends to invite
them to Healthy Together or alert them to relevant application activity.
● For Healthy Together, and U.S. local, state and federal government organizations to communicate with
you.
● To analyze the information we collect through cookies and other tracking technologies to help us improve
our function and to modify the services and information that we provide.
● For fraud prevention and legal compliance, including to prevent fraud or potentially illegal activities, and
enforce our Terms of Service.

HOW WE SHARE YOUR INFORMATION

Personal Information
Except as described below, we may only share your personal information:
 ● With U.S. local, state and federal government organizations and public health organizations for the
purposes we have set out in this Privacy Policy relating to COVID-19 response efforts.
● With third-party service providers that perform services on our behalf, including: to help operate Healthy
Together; to conduct quality assurance testing; to facilitate the creation of accounts; to optimize the
performance of the platform; to provide technical support; and/or to provide other related services.

De-identified Information
We may share de-identified information with public interest organizations, health care organizations and
researchers. We will prohibit these organizations from attempting to re-identify the information we share with
them.
Other Disclosures
We may share personal information with government, law enforcement officials or private parties as required by
law, when we believe such disclosure is necessary or appropriate (a) to comply with legal obligations, law
enforcement requests or legal directives such as a court order or subpoena; (b) enforce the terms and conditions
that govern the platform; (c) protect our rights, privacy, safety or property, and/or that of you or others; and (d)
protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
We may sell, transfer or otherwise share some or all of our business or assets, including personal information, in
connection with a business transaction such as a merger, consolidation, acquisition, spinoff, reorganization or sale
of assets or in the event of bankruptcy. We will require any recipient of data in connection with such business
transaction to abide by this Privacy Policy.

OTHER SHARING OF INFORMATION

We may make available on Healthy Together, or link to, features that allow you to share information with third
parties. Please be careful whenever sharing your personal information with third parties, and only share sensitive
personal information with third parties whom you trust. We have no control over the use of your information by
third parties with whom you choose to share your information.

SECURITY OF YOUR INFORMATION

We have implemented a number of security measures designed to protect your information, including encrypting
all personal information in transit and at rest. Please note that we are not a healthcare provider or other
“covered entity” that is subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and are
not bound by its requirements for handling protected health information. However, we have a security program in
place designed to mitigate risk and to use reasonable and appropriate procedures and technologies to help protect
the confidentiality of all personal information.
It is important that you protect and maintain the security of your account, and you should immediately notify us of
any unauthorized use of your account. No website, mobile application or Internet transmission is completely
secure, and therefore we cannot guarantee that unauthorized access, hacking, data loss, or other breaches or
other type of misuse will never occur. Be careful where and how you share personal information—use public WiFi
spots wisely and avoid clicking unfamiliar links or using unfamiliar devices.
We may post a notice via Healthy Together if a security breach occurs. We may also send you notice by the contact
information you have provided to us in these circumstances. Depending on where you live, you may have a legal
right to receive written notice of a data privacy or security breach.

YOUR CHOICES
Accessing and Updating Your Information. If you have an account with us, you can access and edit your profile
information directly within the profile page of the app.
Deactivating Your Account and Deleting Your Information. You may deactivate your account at any time by
following the instructions within the app settings. Deactivating your account deletes all of your personal
information we maintain. You may also deactivate your account and delete your personal information by
contacting us directly at info@healthytogether.io. Please note that you must follow these instructions to
deactivate your account. Otherwise, your account will remain active, even if you delete or uninstall the app. We
will delete any personal information we maintain on back-up media in the ordinary course of business.
Opting Out of Push Notifications. If you opt-in to receive push notifications within the app, we may send push
notifications or alerts to your mobile device from time to time. You can deactivate push notifications and alerts at
any time by deleting the app, changing your device settings or changing the push notification settings within the
app.
Opting Out of SMS Communications. If you opt-in to receive SMS messages by providing your phone numbers, we
may send you notifications and other SMS messages from time to time. You may opt out of receiving SMS
communications at any time by responding to any SMS with the single-word command, “STOP.” In addition, if you
have an account, you can opt out of SMS communications by changing the settings within the app. You may opt
back in to SMS communications at any time by adjusting your account settings within the app. Please note we may
not be able to determine if you delete or uninstall the app, or block the number that delivers the communications,
and therefore may be unable to automatically stop you from receiving SMS communications unless you have
specifically opted out of SMS communications by following the instructions above.
Opting Out of Location Tracking. While the information you share will be vital to contributing to our awareness
and understanding of how the COVID-19 threat is spreading, ultimately you control what is shared. If you opt in to
sharing your geo-location information through Healthy Together, you can subsequently stop sharing this
information at any time by deleting the app or changing the preferences on your mobile device. Please note,
however, that if you withdraw consent to the sharing of location information, you will no longer be able to use
some features of Healthy Together.

AGE REQUIREMENTS
Healthy Together is not intended for children under the age of 13, and we do not knowingly collect any personal
information from children under 13. If you are between the ages of 13 and 17, you can only use Healthy Together
if your parent or legal guardian has reviewed and agreed to the Terms of Service on your behalf.
If we become aware that personal information we maintain pertains to a child under the age of 13, we will
promptly delete that information from our live systems and applications, unless we are prohibited by law from
doing so. We will delete any personal information we maintain on back-up media in the ordinary course of
business.

CHANGES TO OUR PRIVACY POLICY

We may update this Privacy Policy from time to time. If we make material changes to our Privacy Policy, we will
notify you and other users by posting the changes on Healthy Together or by using the contact information you
have on file with us and will indicate when such changes will become effective.
If you object to the updated Privacy Policy, we will continue processing your information in accordance with the
Privacy Policy to which you agreed or delete your account and information if we cannot do so.
By continuing to use Healthy Together 30 days after we notify you of updated to our Privacy Policy, you will have
agreed to the new Privacy Policy.

CONTACTING US
We are in the very early days and would love to hear your feedback on how we can improve our approach to
impacting the pandemic.
If you have any feedback, or any questions, comments, or concerns relating to this Privacy Policy or our privacy
practices, please send an email to info@healthytogether.io or write to us at the following address:

Twenty Labs, LLC

c/o 280 Park Avenue
41 Floor
st

New York, NY 10017

Effective: April 21, 2020
 Healthy Together FAQ

How does the Healthy Together beta app help protect me and my family and
slow the spread of COVID-19?
The Healthy Together beta app helps you assess your symptoms, find the nearest
testing center, view test results, and learn what to do after you've been tested for
COVID-19. We can work together to slow the spread of COVID-19 and protect our
family members, friends, health workers, and our communities. If authorized by
the user, the app can also provide location data to public health workers,
providing them with a faster and more accurate picture of where and how the
virus is spreading in our community to focus public health efforts.

Do I have to download the Healthy Together Beta App?

No, participation in Healthy Together is strictly voluntary. Using the app, however,
helps you and your fellow Utahns to more accurately pinpoint where the virus
might be active during this period where we move into stabilization and recovery,
but before we have a vaccine. As more people use the Healthy Together app, the
more effective it becomes at helping us find out who is at risk for COVID-19 and if
there are larger outbreaks of the disease in communities. This will help us to
safely return to daily activities, including reactivating our economy.

What happens to my data?

Protecting your data is of utmost concern to the State of Utah and the developer,
Twenty. To ensure the privacy and security of the data will follow these principles
and limitations:
● Using the app is strictly opt-in and voluntary.
● You own your data and can delete it at any time.
● Only data required to combat COVID-19 will be shared with public health
officials.
● Location data is automatically deleted after 30 days.
● Symptom data is automatically de-identified after 30 days.
● The developer will comply with State requirements for data security and
encryption.
 ● You can decide what data you would like to share - for example, bluetooth
data, location data, or contact lists.

Who has access to my data? Is the data shared with any third parties? What
details are shared?
Your data is secure and you are in full control of what you choose to share. Only
data that is useful to combat COVID-19 will be shared with public health officials.

While the State will have access to your symptom data, location and bluetooth
data will only be released to the state should you test positive for COVID-19.

Which public health officials will have access?

Utah has trained a team of contact tracers under the Utah Department of Health
who reach out to people who have tested positive for COVID-19 and have been
potentially exposed to the disease. When you grant access to your location or GPS
and bluetooth data, members of this team will be able to access your data to help
in the contact tracing process.

The app will help these professionals identify transmission zones, contact
patterns, and other vital information to inform their research.

After I opt-in, can I still change my mind and discontinue using the app?
Yes. You can fully delete your data at any time. Location data will automatically be
deleted after 30 days. Symptom data will be automatically de-identified after 30
days.

Will anyone have access to personally identifiable information?

Public health officials and a limited number of development employees with
Twenty Holdings, Inc. will have access to your name, phone number, and location
data for COVID-19 tracing purposes only.

Will you share this information outside the state? With other states or national
groups?
No. Within our privacy policy, we’ve limited all data collected to researchers,
public health, and COVID-19 response efforts.

How are you protecting data from other parties?

Public health will only receive access to necessary health data Your data is
protected by network security (firewall provisioning, third-party penetration
testing, data encryption) as well as State data security measures to ensure your
data is protected.

Will other users be able to see that you’ve been potentially exposed or tested
positive if you’re near them (like wearing a “scarlet letter”)?
No. You will only be informed by public health workers if you’ve come into close
contact with someone who has tested positive for COVID-19.

What collective data would the Utah government like to share publicly in the
weeks following the launch?
The State of Utah values the role of limited government and recognizes that
asking you to provide personal information may be uncomfortable and
concerning to some. However, you can be assured that your personal data will be
used only for the purpose of fighting COVID-19.

Utah will investigate GPS and location data to help understand transmission
zones, with the goal of informing policy-makers so they can make swift and smart
decisions in the coming weeks and months.

Why aren’t you using just bluetooth like Apple/Google is? Or utilizing the API
that Apple/Google built?
Bluetooth on its own gives a less accurate picture than bluetooth and GPS
location data. The goal of Healthy Together is to allow public health officials to
understand how the disease spreads through the vector of people and places, and
both location and bluetooth data are needed to accomplish that.
Bluetooth helps us understand person-to-person transmission, while location/GPS
data helps us understand transmission zones — having both of these important
data points provides a more effective picture of how COVID-19 spreads. This data
helps policy makers make the best possible decisions about how and where we
begin to relax and modify restrictions as our community and economy begin to
reactivate..

Will this app conduct automated contact tracing?

Right now, the app helps the Utah Department of Health conduct enhanced
contact tracing by providing public health workers with location and bluetooth
data.

This enhances our contact tracing efforts by giving our public health teams
more information. If public health determines it to be helpful, the app could
begin automatically alerting people who are identified as having a moderate
to high risk of exposure to COVID-19.

Who developed the app for the State of Utah?

The Governor’s Office and the Utah Department of Health worked closely with a
developer, Twenty, to develop the Healthy Together app. Twenty repurposed its
iOS and Android mobile application technology with existing user registration,
location data sharing, basic map visualization, user-to-user sharing, and alerts to
deliver a solution in two parts through a mobile application and an official portal
to be used by public health.

Twenty consulted with other technology experts and the state of Utah’s team
during the development process. The app was coded and created by the core
Twenty team and approved by State of Utah leaders and health officials.