wordpress blog stats
Connect with us

Hi, what are you looking for?

Aarogya Setu’s backend code released on OpenForge

Aarogya Setu, JNU

Aarogya Setu’s backend code has been released on government-owned open source repository OpenForge (available here). With this, the source codes of the Android and iOS apps, and of the backend servers have been placed in open domain; only the source code of KaiOS app remains unreleased.

Anivar Aravind, a public interest technologist and part of SFLC.in’s advisory board, tweeted, “The demand was not forsome [sic] random backend code snippets. It was for server code, deploy functions and verifiable builds from free and open source repositories. This @NICMeity effort looks like an effort to fool people with some nonfunctional code snippets as ‘Backend code’“. Aravind has filed a PIL in the Karnataka High Court seeking a permanent injunction against the app and had also asked for the server side code to be open sourced.

The government of India had put the source code of the Android client in the public domain via GitHub on May 27. However, NIC-CERT had later said that the Aarogya Setu code on GitHub is “test backend code”, not the “production code”. While announcing the open sourcing of Android source code, the National Informatics Centre (NIC) had also announced a Bug Bounty Programme; submissions for which were accepted until June 26. Despite receiving 1,451 submissions through the programme, the NIC has not yet declared the winner(s).

The iOS source code was released in the public domain on August 10 without any such ceremony. Unlike the Android code, the iOS code was released on OpenForge and had no Bug Bounty Programme attached to it. In a Right to Information response to MediaNama on September 30, the NIC said that the results for the Android Bug Bounty Programme would be announced “shortly”, as would a Bug Bounty Programme for the iOS app.

Since its launch on April 2, the Indian government’s contact tracing app has been mired in one controversy after another. Unlike contact tracing apps used in other countries, that only rely on Bluetooth, Aarogya Setu also tracks a users’ location. This, along with other features of the app as well as its iterative Privacy Policy and Terms and Conditions have raised significant concerns around its incursions into people’s privacy. As it is, the app is envisioned as the first building block of India’s National Health Stack.

Advertisement. Scroll to continue reading.

The Ministry of Home Affairs made the app mandatory for all employees across the country on May 1. In its subsequent lockdown order, however, the MHA made it voluntary. Despite that, a number of public and private entities have been making the app a mandatory requirement for access to services and locations.

Read more:

Written By

Send me tips at aditi@medianama.com. Email for Signal/WhatsApp.

MediaNama’s mission is to help build a digital ecosystem which is open, fair, global and competitive.



Looking at the definition of health data, it is difficult to verify whether health IDs are covered by the Bill.


The accession to the Convention brings many advantages, but it could complicate the Brazilian stance at the BRICS and UN levels.


In light of the state's emerging digital healthcare apparatus, how does Clause 12 alter the consent and purpose limitation model?


The collective implication of leaving out ‘proportionality’ from Clause 12 is to provide very wide discretionary powers to the state.


The latest draft is also problematic for companies or service providers that have nothing to with children's data.

You May Also Like


Google has released a Google Travel Trends Report which states that branded budget hotel search queries grew 179% year over year (YOY) in India, in...


135 job openings in over 60 companies are listed at our free Digital and Mobile Job Board: If you’re looking for a job, or...


Rajesh Kumar* doesn’t have many enemies in life. But, Uber, for which he drives a cab everyday, is starting to look like one, he...


By Aroon Deep and Aditya Chunduru You’re reading it here first: Twitter has complied with government requests to censor 52 tweets that mostly criticised...

MediaNama is the premier source of information and analysis on Technology Policy in India. More about MediaNama, and contact information, here.

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ

Subscribe to our daily newsletter
Your email address:*
Please enter all required fields Click to hide
Correct invalid entries Click to hide

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ