The UK’s contact-tracing app is set to use a “centralised” system that worries privacy experts.