One of the first contact-tracing apps violates its own privacy policy (Washington Post)