Truecaller, the popular caller ID and spam blocking app, is facing scrutiny in South Africa. Concerns have been raised regarding potential breaches of the Protection of Private Information Act (POPIA), with several South African companies lodging formal complaints. The Information Regulator has confirmed they are investigating these claims.
The Allegations Against Truecaller
The core of the issue revolves around how Truecaller handles user data and business listings. MyBroadband reports allegations that Truecaller charges businesses a fee to prevent their numbers from being flagged as 'spam'. The reported cost to be removed from the spam list is approximately R2.18 per call received. This practice raises questions about potential manipulation and whether businesses are being unfairly coerced into paying.
Data Privacy and POPIA Concerns
Legal experts suggest Truecaller may be navigating a precarious legal landscape under POPIA. Key issues highlighted include:
- Data from Contacts: Historically, Truecaller encouraged users to upload their entire address books, potentially including individuals who never consented to being part of the app's database.
- Consent Confusion: Truecaller places the responsibility on users to obtain consent before sharing others' information. However, privacy law dictates that Truecaller itself is accountable for how data is collected, regardless of who uploads it.
The Rise of Scams and Fraud in South Africa
These concerns are amplified by the increasing prevalence of scams and fraud in South Africa. A 2024 TransUnion study revealed that South Africa had the highest percentage of respondents in Africa who reported being targeted by email, online, phone call, or text message fraud in the latter half of the year.
While Truecaller aims to be a helpful tool in identifying spam and unwanted calls, the investigation into these complaints highlights the importance of data privacy and the need for transparency in how personal information is handled. The outcome of the investigation could have significant implications for Truecaller's operations in South Africa and the broader landscape of data protection.