If online lending apps continue harassing you with repeated calls, threatening texts, or messages shaming you to your family, friends, and colleagues even after you deleted the app, you are protected by clear Philippine laws that prohibit these abusive practices. The harassment often persists because the app likely harvested your personal data and contact list while installed. Uninstalling it and revoking permissions stops further access from your device but does not erase data already taken or prevent its misuse. This article explains your rights, why the problem continues, and the exact practical steps to stop it through documentation, formal demands, and complaints to the right government agencies.
Why Harassment Continues Even After Uninstalling the App
When you install an online lending app and grant permissions to access contacts, photos, location, or other data, the app can immediately extract and transmit that information to the lender or its collection agents. Many apps were designed this way before regulators stepped in. Even after you uninstall the app and go into your phone settings to revoke all permissions, the lender already possesses your number, your contacts’ details, and possibly other personal information.
The National Privacy Commission (NPC) has repeatedly found that online lending apps harvested contact lists and used them to shame delinquent borrowers by disclosing debt information to third parties. This practice violates data privacy rules. Once the data leaves your phone, uninstalling the app has no effect on what the lender or its agents do with it. Some operators continue contacting you and your references through SMS gateways, third-party collectors, or retained records in violation of orders to stop.
Your Legal Rights and Protections
Philippine law gives you strong tools against this conduct.
Data Privacy Act of 2012 (Republic Act No. 10173) protects your personal information and sensitive personal information. It requires processing to follow the principles of transparency, legitimate purpose, and proportionality. Using your contacts to shame or pressure you for debt collection is unauthorized processing and disproportionate. The NPC has issued specific guidance and orders banning lending apps from requiring or using full access to contact lists, camera, or social media for loan-related transactions. Violations can lead to administrative orders to stop processing, deletion of data, fines, and criminal prosecution under Section 25 (unauthorized processing), with penalties of imprisonment up to six years and fines up to P4 million when sensitive information is involved.
Financial Products and Services Consumer Protection Act (Republic Act No. 11765) explicitly prohibits financial service providers and their agents from employing abusive, oppressive, or unfair collection or debt recovery practices. It applies to entities under the Securities and Exchange Commission (SEC) and other regulators. The law holds the provider solidarily liable with collection agents for violations during debt collection. Regulators can issue cease-and-desist orders, impose fines, suspend operations, or revoke licenses.
Revised Penal Code provisions may apply depending on the facts. Grave coercion (Article 286), unjust vexation (Article 287), and grave threats can cover repeated harassing calls, threats of public exposure, or intimidation. If shaming occurs publicly on social media or through mass messages, the Cybercrime Prevention Act (Republic Act No. 10175) may also be relevant for cyber libel or related offenses.
Civil Code provisions on abuse of rights (Articles 19, 20, and 21) and quasi-delicts (Article 2176) allow you to claim moral damages, exemplary damages, and other compensation for the harm to your reputation, peace of mind, family relationships, and work caused by the harassment.
The SEC regulates lending and financing companies and has taken action against abusive online lending platforms, including ordering removals from app stores and sanctioning violators. Unregistered lending operations are illegal, which strengthens enforcement options against them.
Step-by-Step Practical Guide to Stop the Harassment
Follow these steps in order. Keep records of every action you take.
Document everything thoroughly and secure your device
Take clear screenshots of all text messages, chat conversations, social media posts, and call logs showing dates, times, phone numbers, and content. Note the names of any contacts who received messages and what was said. Keep a simple log (date, time, method, summary, impact). If safe and legal in your situation, record voice calls (Philippine law generally permits one-party consent recordings for personal evidence).
Go to your phone settings and revoke any remaining permissions for the uninstalled app or related services. Change passwords for email or accounts linked to the loan if applicable. Back up all evidence in multiple places (cloud and external storage).Send a formal written cease-and-desist demand
Address a letter or email to the lending company (use its registered business name if known) and, if available, its Data Protection Officer. Clearly state: you demand immediate cessation of all calls, texts, and contacts to you and any third parties; deletion or secure destruction of your personal data and that of your contacts; and written confirmation within a specific period (e.g., 7–15 days).
Send via email with read receipts or registered mail with return card. Keep copies and proof of sending. This creates an official record and fulfills any requirement to first approach the data controller before filing with the NPC.File a complaint with the National Privacy Commission (NPC)
If the company does not stop or respond adequately, or if the violation is serious, file a formal complaint. Download the Complaint-Affidavit form or use the complaint-assisted form from the NPC website (privacy.gov.ph). Fill it out completely with your details, the company’s information, a clear narration of facts, and the specific violations (unauthorized processing, contact harvesting, shaming).
Attach all evidence (screenshots, logs, copies of your demand letter). Have the complaint notarized by a notary public (bring valid ID and the documents).
Submit in person at the NPC office, by courier or registered mail, or by email to complaints@privacy.gov.ph as a PDF. The NPC can investigate, order the company to stop processing your data, require deletion of information, and refer cases for criminal prosecution. Many lending app cases have resulted in takedown orders and significant reductions in complaints after NPC action.File a complaint with the Securities and Exchange Commission (SEC)
If the lender is a registered lending or financing company, file a complaint for unfair or abusive debt collection practices under RA 11765 and SEC rules. Use the SEC’s designated channels for lending company complaints (commonly flcd_complaints@sec.gov.ph or similar department emails listed on sec.gov.ph). Use a clear subject line format such as: [Your Full Name]_[Company Name]_Harassment and Unfair Debt Collection.
Attach a detailed complaint or affidavit, all evidence, and a copy of your government ID. The SEC can investigate, issue cease-and-desist orders, impose fines, suspend or revoke licenses, and coordinate with other agencies. Check the SEC website for the most current complaint form or instructions for lending and financing companies.Report criminal aspects to law enforcement
Visit your local Philippine National Police (PNP) station and request an official blotter entry or file a criminal complaint. Bring printed evidence and your ID. Describe the repeated harassment, threats, or shaming.
For cases involving online elements, multiple victims, or difficulty identifying the perpetrators, also report to the National Bureau of Investigation (NBI) or the PNP Anti-Cybercrime Group. They have tools to trace numbers and accounts. Criminal complaints can lead to subpoenas, arrests in serious cases, and court filings.Consider a civil case for damages
Consult a lawyer about filing a civil action in the Municipal Trial Court or Regional Trial Court (depending on the amount of damages claimed) for moral and exemplary damages, plus attorney’s fees. You can often reserve the civil action when a criminal case is filed. Strong documentation of the harassment and its effects on your life supports these claims.Take immediate practical protective steps
Block all harassing numbers. Inform your affected contacts (family, friends, colleagues) with a short, calm message explaining that any calls or texts about your loan are from harassers and should be ignored or blocked. Report the app itself to the Google Play Store or Apple App Store for policy violations involving harassment and privacy.
If the debt itself is legitimate, switch all future communication to writing only (email or formal letter) and keep records. You may negotiate a settlement or payment plan in writing, but do not let verbal pressure continue.
Common Challenges, Pitfalls, and Special Situations
Many borrowers face unregistered or fly-by-night apps that are harder to trace as companies. In these cases, focus on criminal complaints with the PNP or NBI and privacy complaints with the NPC—the illegal acts themselves remain punishable even without a registered entity.
Lack of documentation is the most common reason complaints weaken or get delayed. Start logging and screenshotting immediately and consistently.
You remain responsible for any legitimate debt you actually borrowed and received. Stopping harassment is separate from settling or disputing the debt. Courts and regulators distinguish between lawful collection and abusive tactics.
For overseas Filipino workers or foreigners: The same rights and procedures apply. File complaints remotely via email or courier. For notarization requirements, use services at a Philippine embassy or consulate, or check if the NPC or SEC accepts other forms of verification. If you need someone in the Philippines to follow up, execute a Special Power of Attorney. Apostille may be needed only for foreign-issued documents used in formal court proceedings, not usually for initial agency complaints.
Multiple apps or collection agents require tracking each one separately or noting all in your complaints. Retaliation or escalated threats after you complain should be documented and reported to police immediately.
Timelines vary. A strong demand letter sometimes brings quick compliance. NPC and SEC investigations typically take weeks to several months depending on case volume and complexity. Criminal proceedings take longer but can provide faster protective action in threatening situations. Filing fees for agency complaints are generally none or minimal; notarization and courier costs are modest. Civil court filing fees depend on the damages claimed.
Frequently Asked Questions
Can the app still contact me and my references after I uninstall it and revoke permissions?
Yes. The data and contact information were likely already extracted and stored while the app was active. Uninstalling prevents new access from your device but does not stop misuse of existing data.
Is it legal for them to tell my family or friends about my debt?
No. This is generally a violation of the Data Privacy Act and NPC rules on proportional and legitimate processing. It can also amount to unjust vexation or other offenses under the Revised Penal Code.
Do I still owe the money even if they are harassing me?
If you received the loan amount and the debt is valid under the agreement and applicable law (including rules on interest and charges), you remain obligated to repay it. Harassment does not cancel the debt. You can address the abusive collection separately while handling the obligation through proper channels.
How long does it usually take to stop the harassment after filing complaints?
It depends on the response to your demand letter and the agencies’ actions. Some cases see relief within days or weeks after regulator involvement; others require sustained follow-up over one to three months or longer. Complete evidence and persistence improve outcomes.
What if the lending app or company is not registered with the SEC?
Unregistered lending is illegal. You can still file strong complaints with the NPC for privacy violations and with the PNP or NBI for criminal acts such as harassment or threats. The lack of registration often supports enforcement against the operators.
Can foreigners or people living abroad file these complaints?
Yes. The protections apply to anyone affected by these practices in connection with Philippine transactions. File remotely by email or courier and arrange notarization through Philippine consular services if needed.
What evidence works best?
Timestamped screenshots of messages and posts, call logs or recordings, a chronological incident log, copies of your demand letter and any responses, and affidavits from affected contacts. The more specific and organized, the stronger your case.
Will complaining affect my credit standing or make things worse?
Filing legitimate complaints about illegal harassment with regulators or police should not harm your credit. The underlying debt may still appear in credit records if legitimate. Focus on evidence-based filings through official channels.
Are there costs or do I need a lawyer?
Agency complaints with the NPC and SEC are generally free or low-cost. You pay for notarization, printing, and courier. For complex cases or civil damages claims, many people start with free assistance from the Public Attorney’s Office (if qualified) or a lawyer referral from the Integrated Bar of the Philippines chapter. A lawyer can help draft stronger documents and represent you in court.
What happens if the company ignores NPC or SEC orders?
Regulators have enforcement powers including additional fines, license revocation, and referral for criminal prosecution. Continued violations after orders strengthen your position for further action or damages claims.
Key Takeaways
- Uninstalling the app does not stop harassment because data harvesting already occurred; the legal violations center on unauthorized processing and abusive collection.
- Strong protections exist under the Data Privacy Act (RA 10173), the Financial Products and Services Consumer Protection Act (RA 11765), the Revised Penal Code, and SEC regulations.
- Begin with thorough documentation and a formal written demand to the lender demanding they stop all contact and delete your data.
- Escalate to the National Privacy Commission for privacy violations and the Securities and Exchange Commission for unfair collection practices when the company is regulated.
- Report criminal harassment to the PNP or NBI for blotter entries or formal complaints.
- Civil action for damages remains available for the harm caused to your reputation and well-being.
- Proper evidence, following agency procedures (including notarization where required), and persistence are the most effective ways to stop the abuse and hold violators accountable.
- Legitimate debt collection must respect your rights and dignity; shaming, threats, and unauthorized disclosure of your information to third parties are not allowed under Philippine law.
These steps have helped many borrowers regain control and reduce or eliminate the harassment. Act promptly, keep detailed records, and use the official channels described.