Beware of "smishing" scams.
Here is a text message a UVA colleague received recently.
This is a scam. Just like phishing emails, do not click on links or respond to the sender.
Real COVID-19 contact tracing will call you (not text or nor email) and will not ask for personal information or for you to download anything.
Here's what the Centers for Disease Control (CDC) says a contract tracer will ask: https://www.cdc.gov/coronavirus/2019-ncov/php/notification-of-exposure.html