Why do trading apps collect more data than they need?

We updated our philosophy page recently, privacy continues to be something we care deeply about.

Quoting @nithin 's tweet:

In the next release, we at Zerodha won’t even ask for storage permission. :grimacing:

Source:

When we say we don’t track or mine data, we mean it. :slight_smile:

7 Likes

Respect for Zerodha. I have my wife account in Angel the experience has been bad i must say. Initial days she has made ELSS with them unable to transfer.

how zerodha tracks user location if not collecting permission.

We use the IP address to collect the geo location of the user.

1 Like

This is a bit of a biased post, all other apps have MF functionality in same app. Zerodha has 2 apps. In coin you guys ask for Phone, SMS, etc. for paying through in app UPI but coin is conveniently missing from this infographic @nithin :grinning:

The other apps like Groww have built in UPI functionality. NPCI SDK demands all these permission like phone sms and contacts.

Comparing permission list 1:1 is not good when functionality is different. Problem is not with permissions, problem is with asking unnecessary permissions (like AngelOne)

I trust Z more than others in privacy and security but there are better ways to convey this trust to users such as through a technical blog of security measures and practices.

2 Likes

It’s only asked for UPI registration to do in-app UPI payment as per the regulations from NPCI. User can choose not to give permission and use other payment modes. It’s not a mandatory permission. Camera permission will be removed in future releases.

And we don’t ask for these permissions on start of coin app, we only ask when user wants to register for in-app UPI payment.

2 Likes

It’s not fair to compare when you put those permissions in another app. Not their fault they wanted users to install only 1 app.

Many permissions are needed for the app to work but when apps ask for unnecessary permission it risks user privacy without a clear reason. That’s where the issue comes in.

Angel, Motilal, and Groww collect excessive data to push revenue generating products i dont see any clear benefit to the user.