Can we track COVID-19 and protect our privacy at the same time?