By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.
The Loan Was Easy. Rebuilding Trust Wasn’t.
Eventually, I repaid the loan.
The reminders stopped.
The calls became less frequent.
But the experience stayed with me.
What bothered me most wasn’t the repayment.
It was knowing that people I cared about had been dragged into a situation they had nothing to do with.
One permission I approved had affected dozens of other people.
That was a lesson I would never forget.
The Biggest Warning Signs I Ignored
Looking back, several warning signs should have made me pause before installing the app.
Here are the biggest lessons I learned.
🚩 The App Requested Too Many Permissions
This was the first warning sign.
A loan application requested access to:
- My contacts.
- My phone information.
- Notifications.
- Storage.
Some permissions may be necessary for legitimate financial services, but every request deserves careful consideration.
Before approving access, ask yourself:
Does this permission actually relate to the service the app provides?
🚩 I Focused Only on Fast Approval
The advertisement promised:
- Instant approval.
- Fast payment.
- No paperwork.
- Easy application.
I concentrated on how quickly I could receive the money.
I didn’t spend enough time understanding how my personal information would be handled.
Convenience should never replace careful decision-making.
🚩 I Didn’t Read the Privacy Information
Like many people, I skipped past the privacy information and terms.
Instead, I pressed Accept.
Today, I pay much more attention to:
- What information is collected.
- Why it is collected.
- How it may be used.
- Whether the explanation seems reasonable.
Understanding how your data will be used is just as important as understanding the loan itself.
🚩 I Ignored Recent User Reviews
The app had thousands of positive ratings.
But I hadn’t looked at the newest reviews.
Later, I discovered that many recent users had reported privacy concerns and aggressive collection practices.
Recent reviews often provide a better picture of an app’s current behaviour than older ratings.
🚩 I Forgot My Contacts Were Not Mine Alone
This was perhaps the biggest lesson.
My contact list didn’t contain only my information.
It also contained details belonging to:
- Family members.
- Friends.
- Colleagues.
- Clients.
Granting access to that information affected more than just me.
It potentially exposed people who had never agreed to interact with the app.
How to Protect Yourself From Risky Loan Apps
Today, I follow a much stricter process before installing any financial application.
Download Apps From Reputable Financial Institutions
Whenever possible:
- Use recognised financial institutions.
- Verify the lender through official websites or regulatory information where available.
- Avoid downloading loan apps from unknown websites or links shared on social media.
Review Permissions Carefully
Before approving any permission, ask:
Why does this app need this access?
If the explanation doesn’t make sense, think carefully before continuing.
Read Recent Reviews
Don’t rely only on the overall rating.
Read the latest reviews to see whether users have recently reported:
- Privacy concerns.
- Unexpected behaviour.
- Poor customer support.
- Aggressive collection practices.
Understand the Loan Agreement
Before accepting a loan, make sure you understand:
- Repayment terms.
- Interest or fees.
- Late payment consequences.
- Privacy practices.
If something is unclear, ask questions before agreeing.
Remove Apps You No Longer Use
After repaying a loan, review whether you still need the application.
If not:
- Remove unnecessary permissions.
- Uninstall the app if appropriate.
- Review your device’s privacy settings.
Frequently Asked Questions
Are all loan apps dangerous?
No.
Many digital lenders operate responsibly and comply with applicable laws and regulations.
However, it’s important to research the provider, understand the permissions requested and review the privacy practices before applying.
Why would a loan app ask for my contacts?
Different apps request different permissions for different reasons.
Before granting access, make sure you understand why the permission is needed and whether it seems appropriate for the service being offered.
Should I approve every permission an app requests?
Not necessarily.
Only approve permissions that you believe are necessary for the app’s legitimate functionality.
If a request seems unrelated, consider whether you really want to install that app.
What should I do if I believe an app has excessive permissions?
You can review and change app permissions in your phone’s settings.
If you no longer trust the application, consider removing unnecessary permissions or uninstalling the app altogether.
Final Thoughts
The biggest mistake I made wasn’t borrowing money.
It was approving permissions without understanding what they meant.
That single decision affected not only my privacy but also the privacy of people who trusted me enough to be in my contact list.
Today, I follow one simple rule whenever I install any financial application:
If an app asks for more information than it reasonably needs, I stop and ask why before tapping “Allow.”
In cybersecurity, protecting your money and protecting your personal information go hand in hand.
Sometimes the most expensive part of a loan isn’t the interest.
It’s the personal data you never realised you were giving away.
About the Author
Jackson Godwin is a Cybersecurity Consultant specialising in Vulnerability Assessment and Penetration Testing (VAPT), Governance, Risk and Compliance (GRC), ISO/IEC 27001, PCI DSS, Cloud Security, AI Security, and Digital Risk Management.
With years of experience helping organisations identify vulnerabilities, strengthen security controls, and improve cyber resilience, Jackson is passionate about making cybersecurity practical, easy to understand, and accessible to everyone.
Through JacksonTechnology.com.ng, he publishes cybersecurity awareness stories, ethical hacking tutorials, compliance guides, cloud security insights, AI security resources, and practical online safety tips to help individuals and businesses stay protected against evolving cyber threats.
His mission is to educate, empower, and inspire safer digital habits—one cybersecurity story at a time.
