As tech companies develop digital tools to slow the spread of COVID-19, a recent report raises concerns about whether these apps protect patient data. What are the main concerns? How are industry and federal lawmakers working to protect users?