App users’ information will be stored securely on their phone. If they choose to share their information with the National Health Service, it will remain under the control of the NHS throughout. Companies working for the NHS to process that data will be bound by data processing agreements that specify how and when the data must be used. Private commercial companies do not have access to personally identifiable data.