[Update: 21 Jan 2021, 5:10pm] We have updated the article and its rating following clarification from GovTech.
According to an article on website RoC Research, individuals might be able to get their TraceTogether data removed via SMSing a certain number.
In the article, the author included what appears to be an email correspondence with two TraceTogether representatives:
In the correspondence, the TraceTogether representatives allegedly stated that besides the email informing his interest in de-registering, he also needs to text ‘DEREGISTER” to +65-8318-4444 and delete the TraceTogether app from his phone. One of the representatives mentioned following that, his mobile number, identification details and TraceTogether ID would then be deleted from their server and all the Bluetooth data would no longer be associated to the author.
The author then clarified if other individuals would also then be able to de-register directly via the SMS method or if they would still need to email the TraceTogether team, to which one of the representatives confirmed (in rather questionable English) that “everyone will be able able to use this method ‘DEREGISTER’ keyword and +65-8318-4444 to deregister (sic)”.
On a HardwareZone thread regarding this method, a forum member uploaded what appears to be a screenshot of a successful request via the SMS method:
Email + SMS, Email-only or SMS-only?
According to the TraceTogether website, individuals who are interested to have their identification data deleted would be able to do so by emailing firstname.lastname@example.org with the mobile number they registered in the App and the last 4 characters of their NRIC / FIN / Passport number. TraceTogether app users would then need to delete the app, while those using the token would need to return their physical token.
There is no mention of any number to SMS as a step needed in the process of de-registering.
We did our own experiment and texted the above-mentioned number. We received the same message as the HWZ forum user:
A two-step process
GovTech confirmed that the number is indeed legitimate. However, this is the second part of a two-step process. To successfully de-register oneself, individuals need to first email the TraceTogether team, receive the acknowledgement email and then only proceed to send the SMS.
Therefore, the claim that individuals can de-register by simply sending an SMS is false.