A look at the state of vaccine passport apps, which have raised concerns over privacy and verification accuracy, as cities like NYC mandate proof of vaccination
Cyrus Farivar / NBC News : Tweets: @nbcnews Tweets: @nbcnews : As New York becomes the first major US city to mandate proof of vaccination against Covid-19 for activities like going to restaurants and theaters, technology experts are raising concerns that vaccine passport apps have accuracy and privacy problems. https://www.nbcnews.com/...
Context & Ripple Effects
New York's Excelsior Pass, built on IBM's blockchain-based health pass platform as a venue-entry convenience in March, has had a rough run: a July hands-on found low adoption, privacy concerns, and persistent technical glitches. Earlier reporting had already flagged the hard parts — forged records, privacy protection, interoperability — and December's coverage warned pass apps could unfairly exclude people from travel and offices.
What changes now is enforcement: New York City becomes the first major US city to require proof of vaccination for restaurants and theaters, turning an app with documented accuracy problems into mandatory daily infrastructure rather than an optional add-on.
First-order effects
- Restaurants and theaters in New York City must now verify vaccination status at the door, making them de facto operators of passport technology they did not build and cannot audit.
- Excelsior Pass shifts from sparsely used pilot to required tool overnight, so its known glitches and accuracy gaps stop being edge cases and become gatekeeping failures at scale.
Second-order effects
- The mandate forces the forgery-defense and interoperability problems NBC flagged in April to be solved by venues and state systems under live enforcement pressure, not in lab conditions.
- Privacy objections raised by technology experts give other cities a concrete template of what breaks before they adopt their own passes, shaping which vendors and designs survive.
Third-order effects
- If the pattern holds, health credential apps consolidate from many competing pilots into a small set of state-backed verification rails, with the exclusion risks flagged since late 2020 becoming civil-rights questions about who gets turned away from public life.
- Mandates convert verification software from consumer product to public utility — meaning reliability, appeal processes, and data handling standards will likely be set by government requirements rather than app-store competition.
The trend: Vaccine credential apps are crossing from voluntary novelty to enforced public infrastructure, with New York's mandate forcing their unresolved privacy and accuracy flaws into the open.