Blog•Mar 17, 2026
Do Banking Apps Really Need All These Permissions?
Banking apps frequently request broad device permissions such as SMS, contacts, and phone access, raising privacy concerns. The author argues that these demands conflict with the Principle of Least Privilege, which advocates minimal access for security. Zerodha’s Kite trading app exemplifies a privacy‑first model by requesting no permissions while still complying with SEBI’s mandatory two‑factor authentication. The post positions this approach as a benchmark for the industry.
