SIOUX FALLS, S.D. (AP) — A contact tracing app pushed by the governors of North Dakota and South Dakota as a tool to trace exposure to the coronavirus violated its own privacy policy by sharing location and user identification information with third-party businesses, according to a report from a tech privacy company.

The Care19 app, developed by ProudCrowd, of North Dakota, was one of the first contact tracing apps endorsed by state governments in response to the coronavirus. Governors from both states promoted it as a way to help health officials stop outbreaks and retrace the steps of people...