The focus note assesses the mobile applications Indian states developed to manage the COVID-19 pandemic, based on established principles of privacy. The note further proposes a paradigm shift to a more interoperable, open, API-based federated microservices architecture to ensure data privacy, predictability, and standardization in future G2C applications.