Contact-tracing apps have a trust problem, even if they do protect your privacy