Can a Lending App Contact a Borrower's Relatives, Employer, or Former Partner?

Quick answer

Generally, no. A lending app may contact the borrower directly, but it may not call, text, or message the borrower’s relatives, employer, former partner, friends, or other phone contacts merely to demand payment, reveal the debt, shame the borrower, or pressure someone else to pay.

Limited contact may be lawful when:

• The person expressly agreed to be a guarantor, surety, co-maker, or co-borrower;
• A genuine character reference is contacted only to verify the borrower’s identity or the truthfulness of application information—not to collect the debt;
• An employer is contacted for a necessary and properly disclosed employment verification during the application process, without revealing unnecessary loan information; or
• Disclosure is required through a valid court order, government investigation, credit-reporting process, or other lawful procedure.

A person does not become liable simply because they are the borrower’s parent, sibling, spouse, partner, employer, emergency contact, or former partner. A guaranty cannot be presumed; it must be express and is limited by its terms under Articles 2047 and 2055 of the Civil Code.

The controlling rules

The main protections come from:

• The Data Privacy Act of 2012, which requires personal-data processing to be lawful, transparent, proportionate, and limited to a legitimate purpose;
• NPC Circular No. 20-01, governing personal data in loan-related transactions;
• NPC Circular No. 2022-02, which strengthened the rules on contact lists, character references, and guarantors;
• SEC Memorandum Circular No. 18, Series of 2019, prohibiting unfair debt-collection practices by lending and financing companies; and
• The Financial Products and Services Consumer Protection Act, which prohibits abusive collection or debt-recovery practices and protects client data.

These rules apply not only to the lender’s employees. A lender generally remains responsible for collection agencies and other service providers processing borrower information on its behalf.

Who may be contacted—and for what purpose?

Person contacted	General rule
Relative or friend	Not for debt collection unless the person is genuinely and expressly bound as a guarantor, co-maker, or co-borrower. Kinship or friendship alone creates no liability.
Employer, supervisor, or co-worker	Employment verification may be permissible when necessary, proportionate, and properly disclosed during the application. Contact to reveal delinquency, embarrass the borrower, or pressure payment is generally prohibited.
Current or former partner	Relationship status gives the lender no special right to contact the person. Contact may be justified only by an actual legal role, such as co-borrower or guarantor.
Character reference	May be contacted only to verify the borrower’s identity and the truthfulness of information supplied for the loan application. A reference cannot automatically be treated as a guarantor or used for debt collection.
Guarantor or surety	May be contacted about the obligation if the person separately consented and expressly undertook liability. The contract determines the nature and extent of that liability.
Co-maker or co-borrower	May be contacted because the person may be directly liable under the signed loan documents. Merely listing a name or number does not by itself prove co-maker status.
Random phone contact	Contact for debt collection is prohibited. A lender cannot lawfully blast collection messages to the borrower’s address book.

A character reference is not a guarantor

This distinction is crucial.

Under NPC Circular No. 2022-02, a character reference is someone whose contact details are provided to verify the borrower’s identity or the truthfulness of application information. The lender must:

• Tell the person that they were selected as a character reference;
• Explain how the contact details were obtained; and
• Give the person an option to have their personal data removed as a character reference.

The lender may not contact a character reference for collection, marketing, cross-selling, or offers from third parties. The reference has no duty to pay unless they separately and expressly entered into an enforceable guaranty, suretyship, or similar obligation.

The same principle applies when the reference happens to be a parent, sibling, employer, or former partner.

When employer contact may be lawful

A lender may need to confirm employment, income, or application information before approving a loan. Such verification may be lawful if it is:

• Necessary for creditworthiness, fraud prevention, or a legitimate loan-processing purpose;
• Supported by an applicable lawful basis under the Data Privacy Act;
• Explained in the lender’s privacy notice or just-in-time notice;
• Limited to relevant information; and
• Conducted without unnecessarily disclosing the requested loan, its amount, or a later payment default.

That does not authorize the lender to call the borrower’s manager, HR department, or co-workers after default to say that the borrower is delinquent or to ask them to force payment.

A different rule applies if a court has already rendered an enforceable judgment and a sheriff serves the employer with a lawful garnishment notice. That is a formal judicial process under Rule 39 of the Rules of Court, not an ordinary collection call by an app or private collector.

When a former partner may be contacted

A former boyfriend, girlfriend, spouse, or domestic partner has no automatic responsibility for the borrower’s loan.

If the former partner was merely entered as a contact or character reference, the lender cannot use that person for collection. The former partner may demand removal of their details as a character reference.

If the former partner actually signed as a co-borrower, co-maker, guarantor, or surety, ending the relationship does not automatically cancel that undertaking. The signed documents, surrounding facts, and applicable property law must be examined. The lender still cannot use threats, insults, public shaming, or other abusive collection methods.

Phone access is not permission to harass contacts

Online lending applications may not engage in unbridled processing of a borrower’s contact list. Under the amended NPC rules:

• App permissions must be suitable, necessary, and not excessive;
• Access should begin only when the information is actually needed;
• The app should prompt the user to revoke access when its purpose has ended;
• Contact-list access must be limited to the minimum needed for the borrower to choose a character reference or guarantor; and
• Processing that leads to harassment, unfair collection, or debt collection from anyone other than the proper guarantor is prohibited.

A lender should provide a separate interface in which the borrower chooses a reference or guarantor. It should not copy the entire address book and decide for itself whom to contact.

Even a borrower’s apparent consent to contact-list access is not a blank cheque. SEC Memorandum Circular No. 18 expressly treats contacting phone contacts other than proper guarantors or co-makers as an unfair collection practice notwithstanding the borrower’s consent. Under the Data Privacy Act, valid consent must also be freely given, specific, and informed.

What collectors may and may not do

A valid unpaid loan may still be collected. A lender may ordinarily:

• Send accurate reminders and demand letters to the borrower;
• Offer restructuring, extensions, or payment arrangements;
• Use an authorized collection agency that follows the law;
• Report accurate credit information through lawful channels; and
• File an appropriate civil case.

A lender or collector may not use such tactics as:

• Threats of violence or other criminal means;
• Threats to take action that cannot legally be taken;
• Obscenities, insults, or abusive language;
• Posting or circulating the borrower’s name, photograph, ID, loan details, or alleged delinquency to shame them;
• False statements about the loan or failure to disclose that a debt is disputed;
• Pretending to be a court, police officer, lawyer, or government agency;
• Contacting unrelated relatives, friends, employers, co-workers, or former partners for collection; or
• Repeatedly contacting the borrower at unreasonable hours.

SEC Memorandum Circular No. 18 generally treats contact before 6:00 a.m. or after 10:00 p.m. as unreasonable. Its narrow exceptions cover an account more than 15 days past due or the borrower’s express agreement that those hours are the only reasonable or convenient time for contact. Those exceptions do not authorize harassment or third-party disclosure.

What to do if the app contacts other people

1. Preserve the evidence first

Before deleting the app, changing numbers, or blocking every sender, save:

• Screenshots showing the full message, number, account name, date, and time;
• Call logs and recordings lawfully obtained by a participant in the conversation;
• Voicemails and emails;
• Social-media posts, comments, URLs, account names, and timestamps;
• Messages received by relatives, the employer, or former partner;
• Short signed statements from people who were contacted;
• The app’s privacy notice, permissions screen, terms, and app-store page;
• The loan agreement, disclosure statement, payment history, and demand notices;
• The lender’s corporate name and the collector’s claimed identity; and
• Proof of every complaint sent and when it was received.

Ask third parties to send original screenshots rather than cropped or retyped versions. Do not publicly repost sensitive loan documents while seeking help.

2. Revoke unnecessary permissions

In the phone’s settings, disable the app’s access to contacts, storage, photos, camera, microphone, location, and other resources that are no longer necessary. Changing permissions does not erase data already copied, so a written request is still important.

3. Send a written complaint to the lender and its data protection officer

Identify the loan and the numbers or accounts used. State who was contacted, what was disclosed, and when it happened. Ask the lender to:

• Stop contacting anyone who is not legally obligated;
• Stop disclosing the loan to third parties;
• Identify the source of the affected person’s details;
• Identify recipients to whom the data was disclosed;
• Preserve relevant logs and recordings;
• Remove unlawfully obtained or unnecessary contact information;
• Correct false information;
• Investigate its employee or collection agency; and
• Communicate only through a specified lawful channel.

Under the Data Privacy Act, a data subject may request information about the personal data processed, its source, recipients, method of processing, and reasons for disclosure. Blocking, removal, or destruction may be requested where data was unlawfully obtained, used for an unauthorized purpose, or is no longer necessary, although lawful record-retention duties may limit complete deletion.

The borrower and each relative, employer representative, or former partner whose own data was processed may have separate privacy rights.

4. Escalate to the proper regulator

For an SEC-regulated lending or financing company, use the SEC’s current iMessage complaint and inquiry portal. Attach the loan documents, screenshots, witness statements, and the lender’s response. Identify both the lending company and any collection agency involved.

For a privacy complaint, the NPC generally requires proof that the complainant first informed the lender, collector, or other responsible entity in writing and that it failed to take timely appropriate action or did not respond within 15 calendar days after receiving the notice. The NPC may waive this exhaustion requirement for good cause or a serious, urgent, or patently illegal violation. Consult the NPC’s current formal-complaint instructions and form and the 2021 NPC Rules of Procedure, as amended.

A formal NPC complaint must satisfy specific requirements, including verification, supporting evidence, relevant correspondence, requested relief, and a certification against forum shopping. Filing fees may apply unless an exemption or waiver is available.

If the actual provider is a bank or another BSP-supervised institution operating through an app, complain first through the institution’s consumer-assistance mechanism. If unresolved, escalate through the BSP Consumer Assistance Mechanism. A cooperative or other specially regulated provider may fall under a different regulator, so verify the legal entity shown in the loan documents.

When help is urgent

Seek immediate legal or law-enforcement assistance if the collector:

• Threatens physical harm, kidnapping, arrest without legal basis, or damage to property;
• Demands payment through extortion or impersonates police, court personnel, or government officials;
• Publishes IDs, intimate images, home addresses, children’s information, or other material creating an immediate safety risk;
• Repeatedly stalks or appears at the home or workplace;
• Hacks an account or device; or
• Serves actual court papers, a summons, subpoena, garnishment notice, or other official process.

For possible computer-related offenses, complaints may be brought to the NBI Cybercrime Division or the appropriate police office. Do not ignore genuine court documents merely because earlier collection conduct was unlawful; consult a lawyer or the Public Attorney’s Office promptly about the response deadline.

Common mistakes to avoid

• Assuming harassment cancels the loan. Improper collection may create separate regulatory, privacy, civil, or criminal consequences, but it does not automatically extinguish a valid debt.
• Relying only on phone conversations. Make the objection in writing and retain proof of receipt.
• Deleting evidence too early. Preserve complete screenshots, call logs, app permissions, and loan documents first.
• Paying an unidentified collector. Verify the lender, current balance, authority of the collector, and official payment channel.
• Treating a reference as a guarantor. Ask for the signed document creating the alleged obligation.
• Posting IDs or loan documents publicly. Redact account numbers, addresses, signatures, QR codes, and other sensitive information.
• Complaining under the app’s brand name alone. Identify the corporation named in the agreement and disclosure statement.
• Ignoring a disputed balance. Dispute inaccuracies in writing, state the amount or charge being challenged, and keep paying any undisputed amount when feasible and appropriate.

Frequently asked questions

Can the app call my parents because I missed a payment?

Not merely because they are your parents. Unless a parent expressly became a co-borrower, co-maker, or guarantor, using the call to reveal the debt or pressure payment is generally prohibited.

Can the collector tell my employer that I am delinquent?

Ordinarily, no. Necessary employment verification during an application is different from disclosing delinquency to shame or pressure an employee. A valid court-directed garnishment or another lawful compulsory process is also different from an informal collection call.

I listed my ex as a reference. Can the app ask my ex to pay?

No. A character reference is not automatically a guarantor. The app may use the reference only for identity and application-information verification, and the reference must be offered a way to have their details removed.

What if my ex signed as guarantor while we were together?

The breakup alone does not necessarily terminate a valid guaranty. Liability depends on the signed agreement and applicable law. The lender must still use fair, lawful collection methods.

Does accepting the app’s terms make contact blasting legal?

No. Contact-list access must remain necessary and proportionate, and the SEC rule specifically prohibits contacting unrelated phone contacts for collection notwithstanding the borrower’s consent.

May the lender contact my reference to locate me after default?

A character reference’s permitted role is verification of identity and the truthfulness of application information—not debt collection. Using the reference to relay demands, reveal delinquency, or pressure the borrower is inconsistent with that limited purpose.

Can a relative file a complaint even if they are not the borrower?

Potentially, yes. A relative, employer representative, or former partner whose own personal data was obtained, used, or disclosed may be a data subject with independent rights. They should preserve the messages and first send a written privacy complaint to the responsible entity unless the NPC’s waiver grounds apply.

Can someone be jailed simply for an unpaid app loan?

Nonpayment of an ordinary civil debt, by itself, does not automatically result in imprisonment. Separate criminal liability may arise from independently unlawful conduct, such as proven fraud or issuance of a worthless check under applicable law, but a collector cannot truthfully claim that arrest is automatic merely because a payment is overdue.

General-information notice

This article provides general Philippine legal information, not legal advice for a particular loan, marriage, employment relationship, or court case. Liability and available remedies depend on the signed documents, the lender’s regulator, what was disclosed, how the contact information was obtained, and the evidence. Controlling sources and official procedures were checked as of 6 August 2026.