HK government confirms LeaveHomeSafe app has facial detection module, requires developer to remove

Hong Kong’s contact tracing mobile app LeaveHomeSafe reportedly contains facial detection feature in its source code but the government reiterated that the app has never used nor required any facial recognition function since its launch.

According to Factwire, after converting the source codes into readable java source files, it discovered LeaveHomeSafe's source code file comprises about 20 folders, containing a subfolder named “reactnative” which further comprises three folders titled “facedetector”, “camera”, and “maskedview” respectively. Factwire added that one of the java files may be used to detect the positions of a person’s mouth, nose tip, left and right cheeks, eyes and ears. It can also detect the person's head tilt in degrees and calculate the probability that they are smiling or has each eye open.

However, after testing the app by entering debug mode, FactWire learned that the app only uses the rear camera of the device. It said the probability of the user’s face being detected is very low.

In response to the report, a spokesman for the Office of the Government Chief Information Officer (OGCIO) said the operation of the LeaveHomeSafe mobile app has never used nor required any facial recognition function since its launch.

"After following up with the contractor responsible for the development and maintenance of the app, the OGCIO learned that the contractor had adopted a readily available module in the market for the development of app to operate the phone’s camera to perform the scanning processes required for the operation, including scanning and interpreting the venue QR code, the electronic vaccination QR code and the taxi registration mark," the spokesperson said. 

OGCIO also required the developer of the app to remove the function without affecting the normal operation of the app to alleviate public concern.

The Hong Kong government launched the LeaveHomeSafe mobile app on 16 November 2020, providing the public with a digital tool for recording the time of their visits to different venues and taxi rides. On the app's website, the government said after downloading the app, users can use the app immediately without registration and provide any information. It added that the matching of visit records and notification function will only be carried out in users’ mobile phone. Moreover, data will not be stored in any government or other systems and will be automatically erased after 31 days.

In November 2021, the government stipulated that citizens entering government buildings or offices must use the LeaveHomeSafe app. The policy was extended to cover all premises in December 2021.

According to a previous report conducted by App Annie that looked at some of Hongkongers' most downloaded apps in general and across different categories. LeaveHomeSafe was the most downloaded app in 2021 as the Hong Kong government required residents to use it to enter different premises such as restaurants.

It is followed by eHealth, an app developed by the Hong Kong government that provides an electronic platform for building up free and lifelong electronic health records for all members of the public. Digital wallet Octopus ranked third as 70% of eligible Hong Kong residents used their Octopus card to receive the government's consumption voucher, according to the city's financial secretary Paul Chan.

Related articles
10 most popular mobile apps in Hong Kong across categories