Blockchain-based apps used to store COVID-19 data may not be as private as they seem.