Many app-based lenders ask for access to users' contacts and photos before proceeding further with the loan. For most regulated lenders, contact and gallery access are not essential to complete KYC, and a user must check the app's authenticity if it pushes for such access, Moneycontrol reported. One must look for regulated entity behind it and skim the privacy policy.