The not so private way of tracing contacts: A first analysis of the NOVID20 Android SDK