A “privacy impact assessment” was performed by an independent law firm, reviewed by an independent statutory authority responsible for privacy protection, and published before the app was released. https://www.oaic.gov.au/updates/news-and-media/privacy-prote...