Virus-tracing apps must not be used for mass surveillance -EU says