Ever tap “Allow” on a permissions screen just to get the loan app open faster? π That one tap might matter more than you think. π
Everything is explained right below β¬οΈβ¬οΈβ¬οΈ
Recommended Reading:
Fake Loan Apps in the Philippines: Warning SignsGLoan vs GCredit vs GGives: What’s the Difference?
No β Philippine loan apps are not allowed to harvest your phone contacts or social media contact list to collect debts, under a specific National Privacy Commission rule issued in 2020.
π³ The loan & e-wallet options Filipinos actually qualify for β the full list goes straight to your email
In this article, we’ll explain exactly what the rule covers, what to do if you’ve already granted the permission, and how to check what an app can access on your phone right now.
Your privacy doesn’t have to be the price of getting a loan.
Keep reading to find out more.

3 online loan options Filipinos can apply for today. No branch visit needed!
YES, SHOW ME THE OPTIONS!NOT RIGHT NOW
How does contact-list access actually work for loan apps?
The National Privacy Commission issued Circular No. 20-01 in October 2020, specifically prohibiting lenders from harvesting phone or social media contact lists for debt collection.
This came after widespread complaints of “debt shaming” β where borrowers’ contacts were messaged or shown embarrassing photos to pressure repayment.
Any lender still requiring blanket contact access as a condition to borrow is going against this rule.
| Permission | Allowed For Debt Collection? | Where To Check | Compare Options First |
|---|---|---|---|
| Full contact list | No β prohibited by NPC | Phone app permissions | Free to compare |
What matters most about apps and contact permissions
- Purpose matters. Some limited data use may be allowed for fraud checks, but not for harassment or shaming.
- Consent isn’t unlimited. Even if you tap “Allow,” the rule still restricts how that data can be used.
- Photos are covered too. Using your photo to embarrass or pressure you is explicitly prohibited.
- You can revoke access. Phone settings let you remove a permission after the fact.
Checking what an app can access takes less time than dealing with the fallout of over-sharing.
Is it illegal for a loan app to access my contacts?
Using your contact list to pressure, harass or shame you (or the people in it) for repayment is explicitly prohibited under NPC Circular No. 20-01.
Lenders holding contact data in violation of the rule are also required to securely dispose of it.
What can happen if I already granted the permission?
You can revoke app permissions directly in your phone’s settings at any time β it doesn’t require the lender’s cooperation.
If an app has already misused your contacts to harass you or others, that’s grounds for a formal complaint to the NPC.
How do I check what permissions a loan app already has?
On most phones, go to Settings, then Apps, select the app, and review its permissions individually.
Look specifically for Contacts, Photos/Media, and SMS β these are the permissions most associated with abusive collection practices.
β οΈ If a loan app still asks for full contact list or gallery access as a condition to apply, or messages people in your contacts about your debt, that’s a direct violation of NPC Circular No. 20-01 β document it and report it rather than complying.
How do I report a loan app for misusing my contacts?
- Review the National Privacy Commission’s official guidance on lending apps and contact data.
- Screenshot the permission request or any message sent to your contacts.
- Revoke the app’s contact and gallery permissions in your phone settings.
- File a complaint with the NPC if the app has already misused your data.
- Report the same app to the SEC if it also appears to be operating without authority.
Keeping evidence makes any complaint far easier to act on.
Where can I file a complaint about my privacy?
Go directly to the regulator responsible for data privacy in the Philippines:
- National Privacy Commission: privacy.gov.ph
- SEC iMessage portal (for unauthorized lenders): imessage.sec.gov.ph
Is it worth checking app permissions before borrowing?
Yes. A legitimate lender can verify your identity and ability to repay without your entire contact list.
It’s a quick check that protects more than just you β it protects everyone in your phone too.
One thing worth knowing: some limited data collection for fraud prevention may still be allowed, so the rule isn’t “zero access,” it’s “no harassment.”
If you’re evaluating an app for other reasons too, this guide on fake loan app warning signs covers the broader checklist.
If you’d rather use a regulated, in-app credit option instead, this guide on GGives eligibility explains how one alternative works.
And for the full roadmap on protecting your credit standing long-term, this guide to rebuilding credit in the Philippines ties it all together.
Ready to compare your loan options? The list above is a good place to start.
I hope this helped β if you still have questions, leave a comment and we’ll get back to you.
Frequently asked questions
Can loan apps in the Philippines access my contacts?
Harvesting your contact list for debt collection or shaming is prohibited under NPC Circular No. 20-01.
What is NPC Circular No. 20-01?
A 2020 rule barring lenders from harvesting phone or social media contacts to harass or shame borrowers.
Can I revoke a permission I already granted?
Yes, directly through your phone’s app settings, without needing the lender’s cooperation.
What should I do if an app messages my contacts about my debt?
Document the messages and file a complaint with the National Privacy Commission.
How do I check an app’s permissions on my phone?
Go to your phone’s Settings, then Apps, and review the specific app’s permissions.
Does this rule mean apps can’t access any data?
No β some limited data use for fraud prevention may still be allowed; harassment and shaming are what’s prohibited.
Where can I compare loan options safely?
Compare a few loan-matching or comparison services side by side before choosing one, and confirm terms on each official site.
Sources consulted: privacy.gov.ph (NPC Circular No. 20-01 on contact harvesting), public reporting on debt-shaming complaints in the Philippines.
β οΈ Disclaimer
This is an independent informational site with no official link to NPC, SEC, or any lender mentioned. We don’t process applications or charge any fee. Program rules and requirements change over time β always confirm current information on official channels before acting.