Can We Track COVID-19 and Protect Privacy at the Same Time?