Can we protect digital privacy amid push to use phone data to fight COVID-19 spread?