App Permissions: What a Loan App Should Never Need
A loan app that wants your contacts, photos or SMS is a warning sign. What permissions a lender might reasonably need, which ones enable harassment and fraud, and how to revoke them.
When you install a loan app, it asks for permissions. Some are reasonable. Others give it the power to message your contacts, read your texts, or view your photos, which predatory lenders use to shame and pressure borrowers.
Permissions and what they enable
| Permission | Risk |
|---|---|
| Contacts | Messaging your family and friends about your debt. See loan app harassment. |
| Photos and files | Accessing private images, sometimes used for threats. |
| SMS | Reading bank and mobile money codes. |
| Call logs | Profiling who you speak to. |
| Location | Tracking where you live and work. |
| Camera | Reasonable for an ID photo during sign-up, but switch it off afterwards. |
How to protect yourself
- Before installing, check the permissions listed in the app store.
- Refuse contacts, photos and SMS access.
- Review permissions later in phone settings and switch off anything unnecessary.
- Prefer licensed lenders. See checking a lender's licence.
An app that refuses to work without your contacts is telling you how it plans to collect.
For more, see loan app scams and unlicensed lenders.
Frequently asked questions
Why would a loan app want my contacts?
Predatory apps use contacts to pressure and shame borrowers. A legitimate lender does not need your entire contact list to assess a loan.
How do I check an app's permissions?
In your phone settings, open Apps, choose the app and look at Permissions. You can switch off anything it does not need.
Will the app stop working if I revoke permissions?
Some may refuse to work. That tells you a lot about the app.
Sources
- Fake and Abusive Debt Collectors, US Federal Trade Commission
- Protect Your Personal Information From Hackers and Scammers, US Federal Trade Commission
- Directory of Digital Credit Providers, Central Bank of Kenya
