A recent report from the Reserve Bank of India (RBI) has unveiled concerning trends in the data privacy practices of fintech and banking applications. According to the analysis, over 70% of the 339 fintech and banking apps reviewed from the Google Play Store have gained access to critical user information, including media files and location tracking capabilities. This raises significant privacy concerns for users, as the report highlights the potential invasion of personal data.
Released for the 2023-24 fiscal year, the report categorizes these access permissions as “most sensitive,” underscoring the growing trend of fintech apps collecting personal data. It found that nearly 73% of the analyzed apps actively tracked users’ locations, while over three-quarters sought permissions to access users’ photos, media, files, and storage. Additionally, many of these apps requested information related to WiFi connections.
The RBI’s findings emphasize the need for greater scrutiny of the data and privacy policies of banks and fintech companies. To address these concerns, Google Play Store evaluates these policies before granting permissions to apps, aiming to protect users’ privacy.
Among the apps analyzed, mobile wallets were found to request the highest levels of sensitive permissions. The report also pointed out that fintech applications involved in digital lending often provide payment services, leading them to request permissions that are typically not appropriate for digital lending.
When comparing Indian fintech apps to their counterparts in the United States and the European Union, the report revealed that Indian apps are more likely to request access to sensitive data, such as phone and camera usage, device IDs, call information, location data, and SMS. The analysis included 40 apps each from the US and EU, alongside 181 apps from India, assessing their data safety practices.
While Indian fintech apps are relatively more transparent in sharing data with third parties, they fall short compared to US and EU apps regarding data encryption practices and the options available to users for data deletion requests. The report warns that the increasing integration of fintech services with e-commerce platforms could further expose consumers to risks related to the misuse of their personal and confidential information.
The RBI’s findings serve as a crucial reminder for both consumers and developers about the importance of data privacy and the need for responsible data handling practices in the rapidly evolving fintech landscape. As the industry continues to grow, safeguarding user information will be vital in maintaining consumer trust and ensuring compliance with regulatory standards.
