> only on confirmed infection does the person's phone upload its last two weeks of broadcast IDs to the cloud

Alternatively phrased: “only upon government request does the person’s phone upload…” with the implied promise that such request will only come as a result of a CV-19+ test result.