I. Introduction

Online lending apps have become a common source of quick credit in the Philippines. They offer convenience, fast approval, and minimal documentary requirements. For many borrowers, however, the speed of access comes with a serious risk: abusive collection practices.

One of the most complained-about practices involves online lending companies contacting, threatening, shaming, or harassing a borrower’s emergency contacts. These contacts may include family members, friends, co-workers, employers, neighbors, or people whose names were taken from the borrower’s phonebook after the app obtained access to the borrower’s device.

In the Philippine legal context, harassment of emergency contacts by online lending apps may involve violations of privacy, data protection, consumer protection, credit regulation, cybercrime laws, civil liability, and even criminal laws depending on the conduct involved.

This article discusses the legal framework governing online lending app harassment of emergency contacts in the Philippines, the rights of borrowers and third parties, the liabilities of lending companies and collection agents, and the remedies available to affected persons.

II. What Is an Online Lending App?

An online lending app is a digital platform, usually downloadable on a mobile phone, that offers loans through an application process conducted online. The lender may be a financing company, lending company, or other credit provider.

In the Philippines, legitimate lending and financing companies are generally regulated by the Securities and Exchange Commission. A company that offers loans to the public must comply with registration, disclosure, fair collection, and consumer protection requirements.

A major problem in the online lending industry is the presence of abusive or unauthorized operators. Some apps operate without proper authority, while others may be registered but still engage in unlawful or unfair collection practices.

III. What Is Emergency Contact Harassment?

Emergency contact harassment happens when a lending app, its employees, or its third-party collection agents communicate with people listed as emergency contacts, references, or phonebook contacts in a manner that is abusive, threatening, humiliating, deceptive, or excessive.

Common examples include:

Calling or texting emergency contacts repeatedly to pressure the borrower to pay.
Telling contacts that the borrower is a scammer, criminal, thief, or fraudster.
Threatening to file criminal cases against the borrower for nonpayment.
Threatening to shame the borrower publicly.
Sending messages to the borrower’s employer or co-workers.
Creating group chats with the borrower’s contacts to shame the borrower.
Posting or threatening to post the borrower’s photo, ID, or personal information online.
Using profane, insulting, or degrading language.
Pretending to be lawyers, police officers, court personnel, or government agents.
Telling contacts that they are responsible for paying the borrower’s debt.
Disclosing the borrower’s loan, debt, or alleged delinquency to people who are not legally entitled to know.
Accessing the borrower’s contact list and messaging people who were never nominated as emergency contacts.

Not every communication with an emergency contact is automatically unlawful. A lender may sometimes have a legitimate reason to verify a borrower’s identity or location, especially if the borrower gave the contact voluntarily. However, the communication must be limited, lawful, fair, respectful, and proportionate. The moment the communication becomes threatening, humiliating, excessive, or involves unauthorized disclosure of personal information, legal issues arise.

IV. Why Emergency Contact Harassment Is Legally Problematic

Emergency contact harassment is legally problematic because it affects not only the borrower but also third parties who are not parties to the loan contract.

An emergency contact is usually not a co-maker, guarantor, surety, or debtor. Merely being listed as an emergency contact does not make a person liable for another person’s loan. Unless the emergency contact separately agreed in writing to be bound as a guarantor, surety, co-borrower, or co-maker, the lender generally has no legal basis to demand payment from that person.

The harassment also creates privacy concerns. A person’s debt information is personal data. Disclosing it to family members, friends, employers, or colleagues may violate data privacy rules. Even if the borrower owes money, the lender does not acquire unlimited authority to shame, threaten, or expose the borrower.

Debt collection is lawful. Harassment is not.

V. Main Philippine Laws and Rules Involved

Several laws and regulatory frameworks may apply to online lending app harassment of emergency contacts in the Philippines.

A. Data Privacy Act of 2012

The Data Privacy Act of 2012 protects personal information and sensitive personal information. It applies to personal information controllers and processors, including lending companies and their collection agents when they collect, process, store, use, disclose, or transfer personal data.

Online lending apps usually collect personal data such as:

Name.
Address.
Mobile number.
Email address.
Employment details.
Government ID.
Photograph or selfie.
Bank or e-wallet information.
Device information.
Contact list.
Emergency contact details.
Loan history and payment behavior.

Debt information is personal information. In many situations, it may also become sensitive depending on the nature of the data and the surrounding circumstances.

Under Philippine data privacy principles, personal data processing must comply with transparency, legitimate purpose, and proportionality.

1. Transparency

The borrower and affected persons must be informed about what data is collected, why it is collected, how it will be used, who will receive it, and how long it will be retained.

If a lending app accesses the borrower’s phone contacts without clear, informed, and valid consent, that may be a privacy issue. If the app uses emergency contact information for debt shaming or pressure tactics, the use may exceed what the data subject reasonably agreed to.

2. Legitimate Purpose

Personal data must be processed only for a legitimate purpose. Verifying identity or contacting a borrower regarding a loan may be legitimate. Harassing third parties, humiliating the borrower, or publishing debt information is not a legitimate purpose.

3. Proportionality

The data collected and used must be adequate, relevant, suitable, necessary, and not excessive. An online lender may not simply take and use an entire phonebook when only limited information is needed to evaluate or collect a loan.

Contacting hundreds of people from the borrower’s phonebook is highly questionable. So is sending debt-related messages to persons who have no participation in the loan.

VI. National Privacy Commission Concerns

The National Privacy Commission has repeatedly addressed complaints involving online lending apps. A major concern has been the unauthorized access and misuse of contact lists, abusive disclosure of borrowers’ debts, public shaming, and harassment of contacts.

The NPC has taken the position that lending companies must process personal data lawfully, fairly, and proportionately. Collection practices must not violate privacy rights. Consent, when used as a basis for processing, must be specific, informed, and freely given. A blanket permission buried in app terms may not automatically justify abusive or excessive use of personal data.

Important privacy issues include:

Whether the borrower validly consented to access to contacts.
Whether emergency contacts themselves consented to their data being collected.
Whether the lender had a lawful basis to contact third parties.
Whether disclosure of the borrower’s debt was necessary.
Whether the collection method was excessive.
Whether the lender retained personal data longer than necessary.
Whether the lender shared data with unauthorized collection agents.
Whether the lender secured the borrower’s personal data properly.

Emergency contacts may also be data subjects. Their names, numbers, and relationship to the borrower are personal information. If a lending app collects and uses their data without a lawful basis, they may have their own privacy complaint.

VII. SEC Regulation of Lending and Financing Companies

Online lending companies and financing companies are generally subject to regulation by the Securities and Exchange Commission.

The SEC has issued rules and advisories against unfair debt collection practices. These rules are particularly relevant because many online lending complaints involve harassment, intimidation, public shaming, and abusive communication.

Unfair collection practices may include:

Threatening violence or harm.
Using obscene, insulting, or profane language.
Disclosing the names of borrowers who allegedly refuse to pay.
Threatening to take action that cannot legally be taken.
Falsely representing that nonpayment of debt is a criminal offense.
Falsely claiming to be connected with a government agency.
Communicating with third parties in a way that humiliates or pressures the borrower.
Using deceptive means to collect a debt.
Contacting the borrower at unreasonable hours.
Sending malicious or defamatory messages to contacts.

The SEC may impose administrative sanctions on lending or financing companies that violate regulations. These may include fines, suspension, revocation of authority, or other penalties.

VIII. The Financial Products and Services Consumer Protection Act

The Financial Products and Services Consumer Protection Act strengthens consumer protection in the financial sector. It promotes fair, reasonable, and effective treatment of financial consumers.

Online lending borrowers are financial consumers. They are entitled to fair disclosure, responsible pricing, proper handling of complaints, privacy protection, and fair collection practices.

Under consumer protection principles, financial service providers must not use unfair, abusive, or deceptive acts or practices. Harassment of emergency contacts may be considered abusive because it uses social pressure, embarrassment, fear, and reputational harm to force payment.

A lender cannot justify abusive conduct by pointing to the borrower’s default. Default gives the lender legal remedies. It does not authorize harassment.

IX. Cybercrime Prevention Act

Some harassment by online lending apps may involve cybercrime concerns, especially when committed through electronic means.

Possible cyber-related issues include:

Cyber libel, if defamatory statements about the borrower are sent online or posted publicly.
Unlawful access, if the app accesses device data without proper authority.
Computer-related identity misuse, if the collector impersonates another person.
Threats or coercive messages sent through electronic communication.
Unauthorized publication of personal data, photos, IDs, or private information.

Cyber libel may arise if collectors publish or circulate statements such as “scammer,” “fraudster,” “thief,” or similar accusations to third persons through Facebook, Messenger, Viber, Telegram, SMS, email, group chats, or other online channels. Even private group chats may become legally relevant if defamatory statements are communicated to persons other than the borrower.

X. Revised Penal Code Issues

Depending on the facts, online lending harassment may also implicate provisions of the Revised Penal Code.

Possible offenses include:

1. Grave Threats

If a collector threatens the borrower or emergency contact with harm, violence, or another wrongful act, the conduct may amount to threats.

2. Light Threats or Other Light Threats

Less serious threats may still be punishable depending on the wording, context, and intent.

3. Grave Coercions

If the collector uses violence, threats, or intimidation to force the borrower or contact to do something against their will, such as paying immediately or contacting the borrower under duress, coercion may be considered.

4. Unjust Vexation

Repeated, irritating, malicious, or harassing messages may be treated as unjust vexation, depending on the circumstances.

5. Slander or Oral Defamation

If defamatory words are spoken to another person, such as through calls or voice messages, oral defamation may be involved.

6. Libel

Written defamatory statements, including text messages or online posts, may give rise to libel or cyber libel depending on the medium used.

7. Usurpation of Authority or Official Functions

If a collector falsely pretends to be a police officer, prosecutor, sheriff, court employee, or government official, criminal liability may arise.

8. Alarms and Scandals

In extreme public harassment situations, other public order offenses may be considered.

The exact offense depends heavily on the content of the message, the recipient, the number of times it was sent, the medium used, and the intent behind it.

XI. Civil Code Remedies

The Civil Code of the Philippines recognizes that every person must act with justice, give everyone their due, and observe honesty and good faith.

Harassment of emergency contacts may give rise to civil liability under provisions on human relations, abuse of rights, damages, defamation, and invasion of privacy.

Possible civil claims include:

Moral damages for mental anguish, serious anxiety, social humiliation, wounded feelings, or similar harm.
Exemplary damages if the conduct was wanton, oppressive, or malicious.
Actual damages if the victim suffered measurable financial loss.
Attorney’s fees and litigation expenses in proper cases.
Injunction or other relief to stop continued harassment.

Borrowers and emergency contacts may both have claims depending on who was harmed.

For example, if a lender sends defamatory messages to a borrower’s employer and the borrower loses employment, the borrower may claim actual damages and moral damages. If the emergency contact is repeatedly threatened or embarrassed, that person may also have an independent claim.

XII. Are Emergency Contacts Liable for the Borrower’s Loan?

Generally, no.

An emergency contact is not automatically liable for the borrower’s debt. A person becomes liable only if there is a legal basis, such as:

The person is a co-borrower.
The person signed as a co-maker.
The person signed as a guarantor.
The person signed as a surety.
The person expressly agreed to assume the obligation.
The person is otherwise liable under a valid contract or law.

Merely being named as an emergency contact does not create liability. A lender or collector who tells an emergency contact, “You must pay because you are listed as a contact,” may be making a false or misleading statement.

An emergency contact may tell the collector that they are not a party to the loan and that further contact may be reported as harassment.

XIII. Can a Lending App Contact Emergency Contacts at All?

A lending app may sometimes contact an emergency contact for limited and legitimate purposes, such as verifying the borrower’s identity, confirming contact information, or reaching the borrower when the borrower gave that contact for such purpose.

However, the contact must be lawful, fair, and limited. The lender should not disclose unnecessary debt details. It should not pressure the emergency contact to pay. It should not shame the borrower. It should not use threatening or abusive language.

A proper communication might be limited to a neutral statement such as asking whether the contact can relay a message to the borrower. Even then, the lender must consider privacy, consent, proportionality, and the rights of the emergency contact.

Improper communication includes:

“Your friend is a scammer.”
“You are responsible for this debt.”
“We will post your friend online.”
“Tell your employer that your employee is a fraud.”
“Pay this loan or we will sue you.”
“We will report you to the police.”
“We will visit your house and embarrass you.”
“We will message everyone in your contacts.”

Such messages may expose the lender and its agents to administrative, civil, and criminal liability.

XIV. Consent and Contact List Access

Many online lending apps request permission to access contacts, photos, camera, storage, location, or device information. Borrowers often click “allow” because the app will not proceed otherwise.

From a legal perspective, consent must be meaningful. Consent should not be vague, forced, or hidden. The user should know exactly what data is being collected and for what purpose.

Even if the borrower gave permission to access contacts, this does not automatically authorize:

Harvesting the entire contact list for collection pressure.
Messaging people who were never nominated as emergency contacts.
Disclosing the borrower’s debt to third parties.
Threatening or humiliating the borrower.
Using contacts for purposes unrelated to legitimate lending operations.
Retaining contacts indefinitely.
Sharing contacts with unaccountable third-party collectors.

Consent is not a license to harass.

XV. Data Privacy Rights of Borrowers and Emergency Contacts

Under Philippine data privacy law, data subjects have rights. Borrowers and emergency contacts may invoke these rights where applicable.

These rights include:

1. Right to Be Informed

They have the right to know how their personal information is collected, used, stored, shared, and protected.

2. Right to Access

They may request information on what personal data the company holds about them.

3. Right to Object

They may object to certain processing of their personal data, especially when the processing is unlawful, excessive, or no longer justified.

4. Right to Erasure or Blocking

They may request deletion or blocking of personal data in proper cases, especially when data is unlawfully obtained or no longer necessary.

5. Right to Rectification

They may request correction of inaccurate or outdated personal data.

6. Right to Damages

They may claim damages for violations of privacy rights if they suffered harm because of unlawful processing.

7. Right to File a Complaint

They may file a complaint with the National Privacy Commission.

Emergency contacts may assert their own rights because their information was collected and used by the lending app.

XVI. What Makes Collection Conduct Illegal or Abusive?

Collection conduct may become illegal or abusive when it involves any of the following:

Threats of violence.
Threats of public humiliation.
False claims of criminal liability.
Impersonation of lawyers, police, prosecutors, or court officers.
Use of profane or degrading language.
Repeated calls at unreasonable hours.
Contacting employers without proper basis.
Disclosure of debt to unrelated third parties.
Posting the borrower’s face, ID, or personal data.
Creating online shame posts.
Sending defamatory statements to contacts.
Coercing emergency contacts to pay.
Accessing contacts without valid consent.
Using collected data beyond legitimate purposes.
Refusing to identify the company or collector.
Threatening legal action that is false, impossible, or misleading.
Claiming that nonpayment of a simple loan is automatically a criminal offense.

The law allows lenders to collect debts through lawful means, including demand letters, negotiation, restructuring, civil collection suits, and other proper remedies. It does not allow lenders to use harassment as a collection strategy.

XVII. Is Nonpayment of an Online Loan a Crime?

As a general rule, failure to pay a debt is not automatically a crime in the Philippines. The Constitution prohibits imprisonment for debt. A borrower who fails to pay a loan may face civil liability, collection proceedings, interest, penalties, negative credit consequences, or a civil suit, but nonpayment alone is generally not criminal.

However, criminal liability may arise if there are separate criminal acts, such as fraud, use of false documents, identity theft, bouncing checks in specific circumstances, or other punishable conduct. A collector should not falsely tell borrowers or contacts that they will be jailed simply because they failed to pay an online loan.

Threats like “You will be arrested tomorrow,” “Police will come to your house,” or “A warrant is ready” are commonly used scare tactics. A warrant of arrest is issued by a court in a proper criminal case, not by a private lending company or collection agent.

XVIII. Debt Shaming and Public Disclosure

Debt shaming is one of the most abusive practices associated with online lending apps. It involves exposing or humiliating the borrower to pressure payment.

Examples include:

Posting the borrower’s photo on social media.
Sending messages to the borrower’s entire contact list.
Creating a group chat titled with insults or accusations.
Labeling the borrower as a scammer or thief.
Sending the borrower’s ID to friends or employers.
Posting edited images or memes.
Threatening to tag the borrower’s relatives or workplace.

Debt shaming can violate privacy, defamation laws, consumer protection rules, and fair collection regulations. The truth that a debt exists does not necessarily justify public disclosure. Debt information is not something a lender can freely publish to the world.

XIX. Defamation, Libel, and Cyber Libel

A collector may incur liability for defamation when they communicate false, malicious, or damaging statements about the borrower or contact to third persons.

Calling a borrower a “scammer,” “estafador,” “magnanakaw,” “fraudster,” or similar terms can be legally dangerous for the collector, especially if sent to employers, co-workers, family members, or posted online.

Cyber libel may be involved when defamatory statements are made through computer systems or online platforms. A private message, group chat, social media post, or online publication may become relevant depending on its communication to third parties.

Even when the borrower has an unpaid debt, it does not follow that the borrower is a criminal or fraudster. Equating nonpayment with criminality may be defamatory if made maliciously or recklessly.

XX. Harassment of Employers and Co-Workers

Some online lending collectors contact the borrower’s employer, HR department, manager, or co-workers. This is particularly harmful because it can damage employment, reputation, and workplace relationships.

Contacting an employer may be unlawful or abusive when the lender:

Discloses the borrower’s debt without a lawful basis.
Asks the employer to deduct salary without proper authority.
Tells co-workers that the borrower is dishonest.
Threatens to shame the borrower at work.
Sends repeated messages to workplace contacts.
Causes the borrower embarrassment or disciplinary problems.
Pretends to have legal authority to garnish wages.

A private lender generally cannot garnish wages on its own. Garnishment requires proper legal proceedings and court authority. A collection agent cannot simply order an employer to deduct salary.

XXI. Role and Liability of Third-Party Collection Agencies

Online lenders often outsource collection to third-party agencies. The lender may argue that harassment was committed by an independent collector. That defense is not always sufficient.

A lending company may still be responsible if:

It authorized the collection agency.
It failed to supervise the agency.
It shared borrower data with the agency.
It benefited from the abusive collection.
It ignored complaints.
It failed to impose lawful collection standards.
It engaged a collector known for abusive practices.

Under data privacy principles, outsourcing does not remove accountability. A personal information controller must ensure that its processors or service providers handle data lawfully and securely.

Collection agencies themselves may also be liable for their own acts.

XXII. Evidence Needed in Harassment Complaints

Victims should preserve evidence. Strong evidence may include:

Screenshots of text messages, chats, posts, comments, and group messages.
Call logs showing repeated calls.
Audio recordings, where legally obtained and usable.
Names and numbers used by collectors.
App name and company name.
Screenshots of the app page, loan terms, privacy policy, and permissions requested.
Proof of SEC registration or lack of registration, if available.
Copies of demand messages sent to emergency contacts.
Statements from emergency contacts.
Proof of public posts or tags.
Employment consequences, if any.
Medical or psychological records, if claiming serious distress.
Payment records and loan documents.
Notices or emails from the lending company.
Timeline of events.

Screenshots should show dates, times, phone numbers, usernames, and context. It is also useful to keep original messages and avoid deleting conversations.

XXIII. Where to File Complaints

Depending on the nature of the violation, complaints may be filed with different agencies or offices.

A. National Privacy Commission

A complaint may be filed with the NPC when the issue involves unlawful collection, use, disclosure, or processing of personal data.

Common NPC-related complaints include:

Unauthorized access to contacts.
Disclosure of loan information to third parties.
Use of personal data for harassment.
Posting personal information online.
Failure to honor data subject rights.
Excessive collection of personal data.
Sharing data with unauthorized collectors.

B. Securities and Exchange Commission

A complaint may be filed with the SEC if the lender is a lending company or financing company engaged in abusive collection practices, unfair conduct, or unauthorized lending.

SEC complaints may involve:

Harassment.
Threats.
Public shaming.
Misrepresentation.
Unfair collection.
Unauthorized operation.
Violation of lending regulations.

C. Philippine National Police Anti-Cybercrime Group or NBI Cybercrime Division

If the harassment involves online defamation, threats, identity misuse, unauthorized publication, or other cyber-related offenses, the matter may be reported to cybercrime authorities.

D. Prosecutor’s Office

Criminal complaints may be filed before the proper prosecutor’s office for offenses such as grave threats, coercion, libel, cyber libel, unjust vexation, or other applicable crimes.

E. Civil Courts

A civil action may be filed for damages, injunction, or other appropriate relief.

F. Barangay

Some disputes may pass through barangay conciliation if the parties are individuals residing in the same city or municipality and the dispute is covered by the Katarungang Pambarangay system. However, companies, cybercrime issues, and cases involving parties from different places may not always be suitable for barangay proceedings.

XXIV. Practical Steps for Borrowers

A borrower experiencing online lending harassment may consider the following steps:

Stop communicating emotionally with abusive collectors.
Save all messages, call logs, screenshots, and recordings.
Identify the lending app, company name, collection agency, and contact numbers.
Review the loan agreement, privacy policy, and app permissions.
Revoke unnecessary app permissions on the phone.
Uninstall the app only after preserving relevant evidence.
Inform emergency contacts that they are not liable unless they signed as guarantors or co-makers.
Send a written demand to stop harassment and unlawful disclosure.
Request correction, deletion, or restriction of unlawfully processed data.
File complaints with the appropriate agencies.
Pay or negotiate legitimate debts through official channels only.
Avoid paying collectors through unofficial personal accounts without proof.
Ask for a statement of account before paying.
Keep proof of all payments.
Avoid borrowing from unregistered or suspicious apps.

Borrowers should distinguish between the obligation to pay a valid debt and the right to be free from harassment. A borrower may still owe money, but the lender must collect lawfully.

XXV. Practical Steps for Emergency Contacts

Emergency contacts who are being harassed may take these steps:

Tell the collector clearly that they are not a borrower, co-maker, guarantor, or surety.
Demand that the collector stop contacting them.
Ask for the name of the company, collector, and authority to contact them.
Do not promise to pay unless they truly intend to assume the debt.
Do not provide additional personal information.
Save all messages and call logs.
Block the number after preserving evidence, if necessary.
Report abusive messages to the borrower for coordinated complaint filing.
File their own complaint if their privacy or peace has been violated.
Avoid engaging in arguments with collectors.

An emergency contact has rights. Being named by a borrower does not give a lender unlimited authority to disturb, threaten, or shame them.

XXVI. Sample Cease-and-Desist Message

A borrower or emergency contact may send a short written notice such as:

This is to formally demand that you stop harassing me and my contacts. I do not consent to the disclosure of my personal information or loan information to unauthorized third parties. Your repeated messages, threats, and disclosures may violate Philippine laws on data privacy, fair debt collection, consumer protection, defamation, and harassment. Please communicate only through lawful and official channels and provide a proper statement of account. All further abusive communications will be documented and reported to the appropriate authorities.

An emergency contact may use this version:

I am not a borrower, co-maker, guarantor, or surety for this loan. I do not consent to being contacted, threatened, or pressured regarding another person’s debt. Please remove my personal information from your collection list and stop contacting me. Further harassment and unauthorized processing of my personal data will be documented and reported to the proper authorities.

These messages should be sent calmly. They should not include threats, insults, or admissions beyond what is necessary.

XXVII. Common Defenses of Lending Apps and Legal Responses

A. “The borrower gave us permission to access contacts.”

Permission to access contacts does not automatically allow harassment, public shaming, or debt disclosure. Data processing must still be lawful, fair, transparent, and proportionate.

B. “The borrower agreed to our terms and conditions.”

Terms and conditions cannot legalize abusive, unfair, or unlawful acts. Consent must be valid and specific. A contract cannot override mandatory law.

C. “We only wanted to remind the borrower to pay.”

A payment reminder must be directed to the borrower through proper channels. Contacting third parties repeatedly or disclosing debt information may be excessive.

D. “The borrower is delinquent.”

Delinquency allows lawful collection. It does not allow threats, defamation, privacy violations, or harassment.

E. “The collector acted independently.”

The lender may still be responsible if the collector acted on its behalf, used data supplied by the lender, or collected for the lender’s benefit.

F. “The emergency contact was listed in the application.”

Being listed as an emergency contact does not make the person liable for payment and does not automatically authorize abusive contact.

XXVIII. The Difference Between Legal Collection and Harassment

Legal collection may include:

Sending respectful payment reminders.
Issuing a formal demand letter.
Calling the borrower at reasonable times.
Offering restructuring or settlement.
Filing a civil collection case.
Reporting to lawful credit information systems, where applicable.
Enforcing a valid judgment through legal processes.

Harassment includes:

Threatening arrest without basis.
Calling contacts repeatedly.
Posting private information.
Shaming the borrower online.
Using insults and profanity.
Threatening family members.
Pretending to be police or court officers.
Sending defamatory messages to employers.
Demanding payment from emergency contacts.
Using personal data as a weapon.

The dividing line is legality, proportionality, truthfulness, and respect for rights.

XXIX. Loan Agreements, Interest, and Penalties

Some online lending apps impose high interest, processing fees, service charges, penalties, and short repayment terms. Borrowers should carefully examine the disclosure of total loan cost.

Issues may arise when:

Charges are not clearly disclosed.
The borrower receives much less than the stated loan amount due to deductions.
Interest and penalties are excessive.
The app automatically renews or rolls over loans.
The borrower is pressured into borrowing again to pay a previous loan.
Payment channels are unclear.
The company refuses to issue official receipts.

Even when the loan terms are questionable, borrowers should avoid ignoring the issue. They should request a statement of account, dispute improper charges in writing, and preserve proof of all payments and communications.

XXX. App Permissions and Digital Privacy

Borrowers should be cautious when an online lending app requests access to:

Contacts.
Photos.
Camera.
Microphone.
Location.
SMS.
Call logs.
Storage.
Social media accounts.
Device identifiers.

A lending app may need some data to verify identity, but broad access to contacts, photos, messages, and files can be risky. Excessive permissions may indicate potential misuse.

Good privacy practice includes:

Reviewing app permissions before applying.
Avoiding apps that require unnecessary access.
Checking the company name behind the app.
Keeping screenshots of permissions requested.
Reading the privacy policy.
Using official payment channels.
Avoiding apps that do not disclose company details.
Revoking permissions after the transaction, where appropriate.

XXXI. Liability of Officers, Employees, and Agents

Liability may attach not only to the company but also to individuals who personally participate in unlawful conduct.

Possible liable persons include:

Company officers who approve abusive policies.
Collection managers who instruct agents to harass contacts.
Collection agents who send threats or defamatory messages.
Data protection officers who fail to address privacy violations.
Third-party processors who misuse personal data.
App operators who unlawfully harvest contacts.
Persons who create fake accounts to shame borrowers.

Corporate structure does not always shield individuals from liability for their own wrongful acts.

XXXII. Borrower Responsibility

While the law protects borrowers from harassment, borrowers also have responsibilities.

They should:

Borrow only from legitimate lenders.
Read loan terms before accepting.
Avoid using false information.
Pay valid obligations when due.
Communicate in writing when unable to pay.
Request restructuring where necessary.
Avoid taking multiple loans to cover previous loans.
Keep payment records.
Avoid naming contacts without their knowledge where possible.
Avoid giving access to data unnecessarily.

Legal protection against harassment is not a legal cancellation of the debt. The debt may remain enforceable through lawful means.

XXXIII. The Role of Employers

Employers who receive messages from online lending collectors should be careful not to act unfairly against an employee based solely on collection messages.

An employer should not disclose additional employee information to collectors without lawful basis. Employers should also avoid deducting from wages unless there is a valid legal or contractual basis, such as a lawful written authorization or court order.

Employees who are harassed at work may report the matter to HR and provide evidence that the messages are from a lender or collector. HR should treat such information confidentially.

XXXIV. Remedies Available to Victims

Victims may seek several types of remedies depending on the facts:

Administrative complaint before the SEC.
Privacy complaint before the NPC.
Criminal complaint before law enforcement or prosecutor.
Civil action for damages.
Injunction or restraining relief in proper cases.
Removal of unlawful posts.
Blocking or deletion of unlawfully processed data.
Correction of inaccurate data.
Sanctions against the lending company.
Revocation or suspension of authority to operate.
Damages for reputational, emotional, or financial harm.

The appropriate remedy depends on whether the main issue is privacy, harassment, defamation, unauthorized lending, or collection abuse.

XXXV. Sample Complaint Structure

A clear complaint may be organized as follows:

1. Parties

State the name of the complainant, the borrower, emergency contact, lending app, company, and collectors if known.

2. Facts

Describe the loan application, amount, date, app name, payment status, and when harassment began.

3. Acts Complained Of

List specific acts such as repeated calls, threats, defamatory statements, contact with employer, public posts, or unauthorized use of contacts.

4. Evidence

Attach screenshots, call logs, messages, app permissions, payment proof, and witness statements.

5. Legal Grounds

Mention possible violations of data privacy, unfair collection rules, consumer protection rules, defamation, threats, coercion, or other applicable laws.

6. Reliefs Requested

Ask for investigation, cessation of harassment, deletion of unlawfully processed data, sanctions, damages, or referral for prosecution as appropriate.

XXXVI. Important Legal Principles

Several principles are central to this issue:

A debt may be collected, but only lawfully.
Nonpayment of debt is generally not a crime by itself.
An emergency contact is not automatically liable for the borrower’s loan.
Consent to app permissions does not authorize harassment.
Debt information is personal information.
Public shaming may create liability.
Contacting employers and relatives may violate privacy and fair collection rules.
Collection agents may be personally liable for threats and defamatory statements.
Lending companies may be liable for the acts of their agents.
Borrowers and emergency contacts both have rights.

XXXVII. Preventive Measures for Consumers

Consumers can reduce risk by taking precautions before using online lending apps:

Check whether the lending company is registered.
Search the app name and company name for complaints.
Read the privacy policy and loan agreement.
Avoid apps that require full contact list access.
Avoid apps with unclear company identity.
Avoid lenders that communicate only through personal numbers.
Keep copies of all loan terms before accepting.
Use only official payment channels.
Do not provide unnecessary contacts.
Inform emergency contacts before listing them.
Avoid borrowing from multiple apps at once.
Report abusive lenders promptly.

XXXVIII. Policy Concerns

The harassment of emergency contacts by online lending apps reflects broader policy issues in digital finance.

These include:

The need for stronger enforcement against unregistered lenders.
The need for app store accountability.
The need for clearer limits on contact list access.
The need for faster takedown of abusive lending apps.
The need for consumer education.
The need for responsible lending standards.
The need for stronger penalties against debt shaming.
The need for cooperation among regulators, law enforcement, telcos, and digital platforms.

Digital lending can help financial inclusion, but it must not become a tool for surveillance, humiliation, and coercion.

XXXIX. Conclusion

Online lending app harassment of emergency contacts in the Philippines is not merely a customer service problem. It is a legal issue involving privacy, consumer protection, fair debt collection, cybercrime, defamation, civil liability, and possible criminal conduct.

Lenders have the right to collect valid debts. Borrowers have the duty to pay lawful obligations. But lenders and collectors must act within the bounds of law. They cannot weaponize a borrower’s contact list, threaten family members, shame borrowers online, contact employers abusively, or demand payment from people who never agreed to be liable.

Emergency contacts are not automatic guarantors. They are not debtors simply because their names or numbers appear in a loan application. Borrowers and contacts have enforceable rights against harassment, unlawful disclosure, and misuse of personal data.

The central rule is simple: debt collection must be lawful, fair, proportionate, and respectful of human dignity. Online lending does not place borrowers or their contacts outside the protection of Philippine law.