uk's nhs covid-19 app needs stronger legal protections