When Sheila M. Bird agreed to participate in a Covid surveillance study, she did not realise her negative test result and personal details would be passed to NHS Test and Trace. Here, she calls for closer scrutiny of privacy policies by research ethics committees, and clearer communication with study participants.