Cebuana Lhuillier — Declared App Permissions
Permissions the app declares it requires, as listed on the Google Play Store. Reviewed against SEC Memorandum Circular 18 (2019), which prohibits Philippine lending apps from accessing contacts, SMS, and call logs.
App
eCebuana
Package
com.clrb.eCebuana2
Last checked
10/4/2026
2
MC 18 violations
6
Sensitive perms
19
Total declared
Apparent SEC MC 18 violations
The following permissions appear in the Play Store listing for this app. SEC Memorandum Circular 18 (2019) §1 prohibits lending apps from requesting access to a borrower's contacts, SMS, or call logs. The presence of these declarations is direct, public, cite-able evidence — independent of how the app actually uses them at runtime.
modify your contacts
Contacts · Modifying contacts
read your contacts
Contacts · Reading user's contact list
Source for permissions: Google Play Store listing →
Source for SEC MC 18: SEC PH MC 18 (2019), full PDF →
Sensitive permissions
Not necessarily MC 18 violations, but worth review (camera may be needed for KYC; location may be reasonable).
- approximate location (network-based)— Approximate location
- precise location (GPS and network-based)— Precise GPS location
- read phone status and identity— Device IMEI / phone state
- take pictures and videos— Camera access (often legitimate for KYC)
- record audio— Microphone access
- read phone status and identity— Device IMEI / phone state
All declared permissions (Play Store)
Contacts
- modify your contacts
- read your contacts
Location
- approximate location (network-based)
- precise location (GPS and network-based)
Phone
- read phone status and identity
Photos/Media/Files
- modify or delete the contents of your USB storage
- read the contents of your USB storage
Storage
- modify or delete the contents of your USB storage
- read the contents of your USB storage
Camera
- take pictures and videos
Microphone
- record audio
Wi-Fi connection information
- view Wi-Fi connections
Device ID & call information
- read phone status and identity
Other
- control vibration
- full network access
- prevent device from sleeping
- run at startup
- view network connections
Uncategorized
- receive data from Internet
Affected by debt-shaming or contact-list harassment?
File an NPC + SEC complaint citing this app's declared permissions as evidence.