Does Truecaller, the app that claims to protect you – and a billion others that have downloaded it – from unwanted calls, threaten your privacy? In spite of what you might think, you should be concerned about sharing your phone number through Truecaller, tech experts claim.
Truecaller promotes its mission as being “to build trust everywhere by making communication safe and efficient.” And it should be noted that it does receive an “Editor’s Choice” shield on GooglePlay.
But while it may work well as a caller ID and spam-blocking app at a time when we certainly need someone to defend us from all the bogus calls/texts we get, one tech writer claims that some facets of Truecaller's data collection post substantial privacy questions.
“For instance, when you sign up for Truecaller, the app not only collects your phone number but also uploads your entire contact list to its database. As a result, even if your friends have not chosen to use Truecaller, their numbers can still end up in a publicly searchable database, potentially compromising their privacy,” claims MakeUseOf’s Pankil Shah -- a claim that TrueCaller told ConsumerAffairs is false (see statement below).
The line in the sand
On the flip side, however, if you haven't signed up for Truecaller, your phone number could still be added to its database if someone who uses the app has your number saved. That’s where Shah thinks things go wrong.
“Truecaller's data access extends beyond just your contacts. When you install Truecaller on your phone, the app also requests permission to access your call logs and messages, and you cannot use the app unless you grant these permissions,” he wrote.
It's logical that an app focused on tracking phone calls would need some data, but it also raises questions about whether such extensive data collection is necessary to accomplish the app's core features. Moreover, the company could gain detailed insight into your communication patterns and personal life by accessing your call logs and messages.
Losing it
At a time when the app landscape is ripe with companies that know too much about our kids, what we pray for, and our mental health, the last thing we need is one harvesting our personal data and risking losing it. But, just last week, a massive data leak involving Truecaller reportedly exposed the personal information of 273 million Indian users.
In today's global day to day, what happens in Bombay can just as easily happen in Boise or Baltimore. And like AT&T and mSpy users found out in their recent data breaches, those Truecaller users in India woke up to find that everything from their phone numbers and genders to their Facebook IDs could already be on the Dark Web.
Unlisting your phone number from Truecaller
Luckily, Truecaller makes things simple if you want to remove your phone number from its database. To start, you need to deactivate your account. This GuidingTech how-to video offers a simple way to do that:
Shah recommends that once you've deactivated your account, you might want to unlist your phone number to ensure your contact information does not appear in the Truecaller database. Here's how to do it:
- Open a web browser on your phone or computer and head to Truecaller's phone number unlisting page.
- Scroll down and select the No, I want to unlist button.
- Enter your phone number in the text box, specify your reason for opting out, and hit the Unlist button.
- Copy the SMS code that appears and send it to Truecaller using the phone number you want to unlist. You can also do this by scanning the displayed QR code.
- After sending the message, return to your browser, and you should see a confirmation message.
If you do an “unlist,” it’ll take about 24 hours for your number to be deleted from Truecaller’s database. You should also know that Truecaller says that, by unlisting your number, "unlisting can’t be reversed, there’s no spam protection, and people won’t know when you’re calling." Shah adds that Truecaller won't allow you to unlist a phone number if it is marked as spam in their database.
Truecaller responds
In response to Shah’s claims, a spokesperson for Truecaller told ConsumerAffairs that its users have “a lot of controls available to them" in the apps privacy center such as availability, deactivation of any connected accounts, and including the aforementioned unlisting and deactivation of any connected accounts.
As far as the data leaks, the spokesman had this to say: “These mentions keep cropping up from time to time and seem to (usually) reference data for sale. The reality of the situation is that databases keep getting compiled and sold, especially in many developing nations (where data collection is rampant, through shops, couriers and dubious marketing agencies).”
The spokesperson went on to say that, frequently, bad actors call the data “Truecaller data” in an effort to make their data “appear more genuine [so] they can charge higher prices for it.
“[Truecaller’s legal team] keep[s] getting these references to 'Truecaller data for sale' taken down but they keep mushrooming. Needless to say, they are damaging our credibility and leading to constant data leak stories.”
Truecaller also denied Shah’s assertion that Truecaller uploads contacts to build a database. “We collaborate with advertising partners but would never sell your personal data,” the company states.