LeaveHomeSafe app ceases operation amid easing of restrictions

Hong Kong’s contact tracing mobile app LeaveHomeSafe has ceased operation upon the further easing of covid restrictions in the city.

According to its official statement on 8 January, The Office of the Government Chief Information Officer (OGCIO) said following the relaxation of different anti-epidemic measures, the resumption of normal travel of Hong Kong and the Mainland in a progressive, orderly and comprehensive manner, as well as the resumption of normalcy of public's daily lives, the "LeaveHomeSafe" system has ceased operation and the app will not be further updated. 

"The "LeaveHomeSafe" telephone hotline (2626 3066) and the mobile support stations at 25 MTR stations for supporting the Vaccine Pass measure also ceased operation from today onwards," the statement read. 

In addition, the OGCIO received instruction from the Department of Health to delete all visit records in the system previously uploaded from "LeaveHomeSafe" mobile app of confirmed cases. The deletion is completed. 

Members of the public who have downloaded the "LeaveHomeSafe" mobile app may keep it in the mobile phones should they wish to make use of some of its functions (such as the PCR Testing Registration Code).

LeaveHomeSafe app has copped flak at the early stage of its launch regarding privacy concerns and security flaws. Back in July 2022, the HKSAR government has defended its LeaveHomeSafe app against alleged security flaws suggested by a report done by a Polish cybersecurity firm.

According to the report of 7ASecurity released on 26 July 2022, the firm has identified vulnerabilities and implementation flaws of the app during the testing period. The firm claimed that flaws in the app could possibly expose sensitive user information, and it said that the app is unclear on certain aspects, including where and how the app transmits data, containing potential RCE issues, the app's backdoor and its root access. The cybersecurity firm's audit team also proved that the app fails to protect PII at rest and in transit, its visit record weaknesses in transit and at rest, weakened TLS communications, insecure SD card usage and the app's potential of obfuscation. 

The OGCIO responded in a statement released on 28 July 2022, stating the report is inaccurate and contains unfair accusations.

The LeaveHomeSafe app is a digital contact tracing app launched in 2020 to conduct contact tracing in Hong Kong. Starting from December 2022, people in the city no longer need to scan QR codes with their LeaveHomeSafe app when entering premises. 

Related articles:

Hong Kong scraps LeaveHomeSafe check-in requirements
Hong Kong claims cybersecurity report on LeaveHomeSafe app to be inaccurate
HongKongers react to health code system in LeaveHomeSafe app
HK's LeaveHomeSafe app deletes vaccine pass QR codes, government apologises