They must do so by leaving a complete record, so anyone can just go to sms.1922 and look at exactly which municipalities, which contact tracer have accessed your whereabouts in the past 28 days. We delete everything after 28 days, and it’s never used for any other purpose.