Can I demand that a lending app delete my data?
Last updated: 2026-07-11 · Educational content; not legal advice.
Short answer
Yes. The Data Privacy Act (RA 10173) §16(e) gives every data subject the right to suspend, withdraw, or order the blocking, removal, or destruction of their personal data when it is incomplete, outdated, false, unlawfully obtained, used for an unauthorized purpose, or no longer needed. NPC Circular No. 20-01 (2020) separately orders lending and financing companies to securely dispose of any borrower contact lists they hold in violation of the rules, and bars keeping your data in perpetuity. Send a written erasure demand; if the lender refuses or ignores it, file with the NPC, which can order deletion.
Primary sources
Frequently asked
Can they refuse because I still owe a balance?
They may keep the minimum data needed to enforce a live loan and to meet a legal retention rule, but that does not entitle them to keep your harvested contact list, photos, or excess data — NPC Circular 20-01 requires securely disposing of unlawfully collected data and bars indefinite retention.
How do I make the demand?
In writing, addressed to the lender's Data Protection Officer, identifying yourself, specifying the data to be deleted (e.g., your contact list and gallery), and citing RA 10173 §16(e). Keep proof of sending; a controller has a duty to act on a data-subject request.
What if they ignore me?
File with the NPC. It can order deletion, issue a cease-and-desist or compliance order, impose administrative fines, and refer the matter for criminal prosecution under RA 10173.
Take action
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Contact-list scraping, unauthorized data use, and how to file with the NPC.