More analysis will be needed once the technical details are available, but this is where I see the first problem. The server you upload the data to will at the very least see your IP address, and voila, with help of your carrier it knows who you are, can link the random keys to your identity, and to other people who have done the same.
I would be much less concerned if this was *not* embedded in the OS, but just an app that the user can uninstall ...
Right. So the server now knows you've tested positive for SARS-CoV-2 (or at least you're claiming so). They don't yet know who you are, because to get your name, they have to get a court order, or be some authority (police, FBI, and so forth) that automatically has the powers to obtain personal information for an IP address.
But let's say the server was run by the government, and they could easily get this data... the thing is, a lab has already tested you positively for SARS-CoV-2 by analyzing your blood sample. Name, address, everything included.
Which is much more reliable information that just your address (which doesn't even necessarily identify you as an individual) that the government could obtain just as easily. If you upload the info from a Starbucks WiFi network, they don't even have that.
And even if they did go through all that trouble, all they know is that you, John Doe, were infected. After two weeks, you're most likely all good again, and also immune.
Where exactly is the dystopian privacy nightmare here that leads to dissidents being rounded up and shot by "deep state" thugs in a dark alley? Or whatever folks on the first few pages of this thread are imagining when they're saying "no thanks I don't want the government to spy on me"?
- edit -
Just to make this very clear: this technology can not be repurposed in the future to perform, say, contact tracing of journalists and dissidents (in authoritarian countries where dissidents are a concept in the first place). A user has to actively share their random ID history in order to notify people they were in contact with that they were, well, in contact. Without knowing who these people are, and without revealing their identity to these people.