Find MySejahtera Alternatives, Move Away From MySJ Deal — Rais Hussin & Ameen Kamal

Obvious red flags and clear indications of conflicting interests contribute to mounting distrust of MySejahtera.

It is understood the government is finalising deals with MySJ Sdn Bhd, but the government should not rush it.

If anything, the government should put the deal on hold until investigations by the Public Accounts Committee (PAC) are concluded. That would be the responsible action.

The government’s excuse of not finding other app developers may have been acceptable at the height of the pandemic, but the fact that the debacle was made public at a time when the country is transitioning into endemicity should be seen as an opportunity to move away from the MySejahtera app and be free of MySJ.

There is already a questionable sequence of events surrounding the apparent one-sided exclusive treatment given to the so-called “Corporate Social Responsibility (CSR) deal” by the government (by not stopping and finding a new “operator”) as KPISoft/Entomo entered into a commercial arrangement with MySJ on October 6, 2020, while the CSR deal was still in effect.

Therefore, ignoring the opportunity to sever ties with MySJ may send the wrong signal that the government is complicit.

MySJ effectively “owns” the MySejahtera app, as reports have indicated that developer Entomo Malaysia (formerly KPISoft) has been given exclusive and perpetual licence through a licensing agreement.

Health minister Khairy Jamaluddin was reported to have said that the reason for continuing negotiation with MySJ was that there were requests for more modules, leading the government to continue with the existing “operator”, instead of stopping and finding new operators.

Regardless of what modules are being referred to, or what “operator” means, a mere operator should be changeable. 

If we take Khairy’s reported statement that the government owns the data, modules in MySejatera, and the brand, then perhaps there are still components of ownership that MySJ has that the government wants or needs from said “operator”.

For example, health news portal CodeBlue has reported that a share sale agreement dated August 27, 2021 states that MySJ is the “legal and beneficial owner of all rights, title, and interest, including intellectual property rights in the MySejahtera application and all related technology, knowledge, know-how, updates/ upgrades, and trade secret in relation to the MySejahtera application.”

Simply put, the “operator” of the platform is also the owner of the platform.

Be that as it may, it could mean that if the government want more “modules” or “updates” to the app, only MySJ has the rights to develop these upgrades.

Therefore, if MySejahtera is the one and only option, then the government has no choice but to deal with MySJ

Therein lies the opportunity for the government to escape the apparent “CSR trap”. 

Given that the Malaysian government already owns the data, as it claims, and if there are ways to securely migrate all data to be integrated with a new app, then the government should strongly consider changing the platform, relinquishing the government’s dependence on MySJ.

If the government truly wants the modules or functions of MySejahtera, it should seek other developers that can develop similar, or perhaps better, app features.  

Overarching reasons to move away from MySejahtera and MySJ include the significant loss of trust and questionable usefulness of the app, the questionable fairness of the deal with MySJ, and unaddressed concerns surrounding MySJ shareholders and ownerships.

People Don’t Trust The MySejahtera App Anymore

The debate on whether MySejahtera is relevant or not for an endemic phase (which Malaysia is transitioning to) is a related point, and a topic on its own.

Regardless, there are strong indications that many people now distrust the app, even if some people and the government still appreciate the modules and functions. 

As EMIR Research has mentioned in prior publications, involvement of various parties owning different “parts” of MySejahtera cast more doubt about the government’s assertion that only it has (exclusive) access to the data gathered and processed by MySejahtera, even if it owns it. 

The app, which is owned by MySJ, collects data that is owned by the government, running on software developed and owned by KPISoft/Entomo.

It remains unclear how this separation of ownership is realistically operationalised outside of ideally-written legal documents.

Not to mention the issues of company shareholding, directorships, and ownership structures which gets more convoluted with multiple reports from various sources on similar names appearing across companies and across international borders that appear to be dealing with one another. 

These obvious red flags and clear indications of conflicting interests contribute to mounting distrust of the app.

The authorities’ silence on this merely serves to accelerate the trust degradation, wasting any payments the government have made (using public funds) to MySJ, as less and less people use the MySejahtera app.

Ignoring the issue fuels speculation that that there could be elements of corruption, conflicting interests, and collusion between private parties and the authorities, especially if the deal still goes through, despite not making sense. 

Other issue such as the risk of foreign ownerships remain unaddressed, worsening the trust deficit.

Personal data protection issue is a main driver for the degrading trust of MySejahtera, and concerns have been growing in the past weeks.

In addition to uncertainties on the fate of personal data before any formal contracts were made, doubts on exclusive data accessibility, and technical concerns on data security and integrity (which can only be addressed via forensic digital investigations or audits of the entire ecosystem), it would appear that even the MySejahtera privacy policy has potential loopholes too, as reported by CodeBlue.

Specifically, the health news portal have reported that according to an intellectual property and information technology expert, MySejahtera’s privacy policy lacks important information such as the names of agencies or government contractors which may have access to different types of personal data, the way personal information is processed, data storage locations, and other details.

CodeBlue have reported additional concerns such as the 90-day retention period, whereby the app’s privacy policy only states this in relation to check-in data. Other personal information such as personal individual identifiers, medical, and health data are not specified in the policy.

As for check-in data, the same issue on whether there are sufficient mechanisms to ensure exclusive access to the information still remains. For example, how do we know duplicates of the data have not, and could not have been made prior to deletion?

Despite the nation’s transition into endemicity, the reopening of national borders, and loosened standard operating procedures (SOPs), which have contributed to increasing mobility, CodeBlue has reported a significant 30 per cent decline in MySejahtera check-ins nationwide, with Kelantan, Terengganu, Pahang, Putrajaya, and Kedah exceeding the national decline with a drop of 38 to 49 per cent, based on data collected between March 25 to April 9. 

These are strong enough reasons to consider alternatives to the app. 

MySJ Deal May Not Be Fair 

The biggest winner at the moment is Entomo, as reports indicate that they were able to seal an exorbitant deal worth RM338.6 million with MySJ. 

Assuming that the actual development cost by KPISoft/Entomo was around RM8 to 10 million, MySJ would be paying up to 42 times the cost. 

The question is how would MySJ recoup this large investment?

On the government’s deal with MySJ, Khairy was reported to have said the following: “I can tell you for a fact that the amount that we are negotiating with MySJ is much, much lower than RM300 million. Far lower than RM300 million.”

Let’s say that the figure ends up being between RM80 to 100 million. This would still mean the government is actually paying about 10 times the actual development cost, if we use the same cost assumption. 

Thus, it is a false notion to simply assume that any figure lower than RM300 million is good. In all likelihood, the statement of “far lower than RM300 million” could mean the government is still getting a very bad deal. 

Now, if MySJ gets the deal for the assumed RM80 to 100 million, this is, at best, only around a third of MySJ’s cost of RM338.6 million.  

It is likely that other revenue streams for MySJ to recover its investments would include the proposed 15-year scope expansion of MySejahtera for a reported RM138 million annually. 

Following the same assumptions, this means that MySJ can recover its initial cost of RM338.6 million in less than two years, if the expansion agreement also starts this year. 

Upon cost recovery, MySJ could be enjoying 13 years of revenue, totaling nearly RM1.8 billion. 

Say that the annual cost for the scope expansion deal is also RM8 to 10 million, then the government would be paying MySJ around 13.8 times its development cost. 

If these deals go through with such assumptions, then MySJ and Entomo owners would be making big money. The people are the true losers in this case, as the government has overspent public funds and enriching the few, while concerns regarding personal data protection remain. 

And MySJ isn’t likely to just stop there. 

As reported by CodeBlue, MySJ actually have plans for the acquisition of presumably “MySejahtera expansion” businesses, which may involve more payments either from the government or perhaps even app users — which could face much lower financial projections with a shrinking pool of app users.

This scenario of perpetual reliance on MySJ puts the government in a continuously disadvantageous position in negotiations. How can the government ensure it gets a fair price without opening this to other developers?

If these MySejahtera expansion projects are truly value-adding (this is up to public health experts and economists to determine), then what is needed is an open tender, before the government gets stuck with relying solely on MySJ for any public health-related modules and functions.

MySJ shareholders are also in a legal battle, which may decrease the company’s reliability. The government shouldn’t rely on a problematic company. 

If anything — and contrary to the notion that shareholder disputes have nothing to do with the government — the underlying reasons for the dispute should be of interest for the government to investigate further.  

Assuming the government has the source code — which previous statements appear to allude to — then they should make it open-sourced so that new modules and features can always be designed by other developers.

If not, or if this infringes on rights owned by MySJ/Entomo, then the government should consider moving away from MySejahtera entirely, and opt to develop a new app through an open tender, if they deem the functions to be necessary

As EMIR Research have reported, Singapore reportedly spent S$13.8 million for the development and acquisition of the SafeEntry digital check-in system and TraceTogether app and tokens.

Technology ecosystem news portal Digital News Asia (DNA), have reported that Ravee Suntheralingam, who is a Cambridge-educated Gerak Independent candidate with 23 years of experience in the information and communication technology sector, opined that MySejahtera is not costly to develop after studying its features, and doubts it would cost more than US$238,000 (RM1 million) for the first three modules.

A Malaysian software developer released a press statement on March 29, 2022, offering to not only replicate MySejahtera, but also improve it, for about RM6 million. 

There could be many other proposals by other companies, if only an open tender was conducted, and if what appeared to be a “CSR trap” didn’t happen.

Ultimately, if the government wants to continue using the current or future features of MySejahtera, there are other developers who can develop it at a far cheaper price.

But the government must act now before it is too late.

Rais Hussin and Ameen Kamal are part of the research team at EMIR Research, an independent think tank focused on strategic policy recommendations based on rigorous research.

  • This is the personal opinion of the writer or publication and does not necessarily represent the views of CodeBlue.

You may also like