M Lhuillier Financial Services — Declared App Permissions
Permissions the app declares it requires, as listed on the Google Play Store. Reviewed against SEC Memorandum Circular 18 (2019), which prohibits Philippine lending apps from accessing contacts, SMS, and call logs.
App
MCash
Package
com.mlhuillier.mlwallet
Last checked
5/10/2026
1
MC 18 violations
3
Sensitive perms
20
Total declared
⚠️ Apparent SEC MC 18 violations
The following permissions appear in the Play Store listing for this app. SEC Memorandum Circular 18 (2019) §1 prohibits lending apps from requesting access to a borrower's contacts, SMS, or call logs. The presence of these declarations is direct, public, cite-able evidence — independent of how the app actually uses them at runtime.
read your contacts
Contacts · Reading user's contact list
Source for permissions: Google Play Store listing →
Source for SEC MC 18: SEC PH MC 18 (2019), full PDF →
Sensitive permissions
Not necessarily MC 18 violations, but worth review (camera may be needed for KYC; location may be reasonable).
- approximate location (network-based)— Approximate location
- precise location (GPS and network-based)— Precise GPS location
- take pictures and videos— Camera access (often legitimate for KYC)
All declared permissions (Play Store)
Contacts
- read your contacts
Location
- approximate location (network-based)
- precise location (GPS and network-based)
Photos/Media/Files
- modify or delete the contents of your USB storage
- read the contents of your USB storage
Storage
- modify or delete the contents of your USB storage
- read the contents of your USB storage
Camera
- take pictures and videos
Wi-Fi connection information
- view Wi-Fi connections
Other
- change your audio settings
- control Near Field Communication
- control flashlight
- control vibration
- full network access
- prevent device from sleeping
- read Google service configuration
- run at startup
- view network connections
Uncategorized
- access DRM certificates
- receive data from Internet
Affected by debt-shaming or contact-list harassment?
File an NPC + SEC complaint citing this app's declared permissions as evidence.