How to balance privacy while using contact tracing for COVID-19