--- title: "A caller ID app shows my name and details to strangers | dpdpr.in" description: "People who never had your number see your name, or a wrong or offensive name, when you call. Your rights, how to fight it step by step, and what to do if it..." url: "https://dpdpr.in/rights/scenarios/caller-id-app-shows-my-name/" canonical: "https://dpdpr.in/rights/scenarios/caller-id-app-shows-my-name/" site: "dpdpr.in" updated: "2026-11-02" disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY." --- # A caller ID app shows my name and details to strangers Plain-language help for ordinary people. General information, not legal advice. Helplines, portals and screen names were checked against official Government and regulator pages on 1 November 2026. Portals change: if a screen looks different, follow the words on the screen and the official guide linked in each step. "A stranger saw my full name when I called. I never installed the app. Someone else's contacts must have uploaded it." The situation in a citizen's own words, paraphrased from public reports. No names or personal details. Caller ID apps build names from contact lists people upload. You can ask the app to unlist your number. **Safety first.** Threatened or in danger: call **181** (women) or go to the nearest police station. Lost money: call **1930** at once. ## Your rights - **Right to ask the app to remove your number.** Truecaller's own page lets you unlist a number; it says unlisting cannot be reversed and can take up to 24 hours. - **DPDP rights from 13 May 2027.** You can ask what data the company holds and who it shared it with (section 11), ask for correction or erasure (section 12), and complain to the company, then to the Data Protection Board (sections 13 and 27). The company answers for its processors (section 8(1)). - **Right to stop marketing calls and SMS.** Register DND by sending FULLY BLOCK to 1909. A spam complaint made within 7 days is valid and your telecom company must act on it (TRAI TCCCPR, 2018, as amended in 2025). ## How to fight it, step by step One action per step. Each step says what to write, what to attach, what you get back, and how long to wait before the next step. If the person turns out to be fake, skip to [If it is fake](#fake). 1. **Save the evidence before you block or delete anything.** What to write: A short note with the date, time, number used, and exactly what was said or what details they knew. What to attach: Screenshots of the call log, SMS, WhatsApp chats (with the number visible), and any payment screen. What you get back: A record that cannot later be denied. How long to wait: Do this the same day. 2. **Use the app's own unlisting or deletion page.** What to write: Your number, as the page asks. What to attach: Nothing. What you get back: A confirmation on screen. How long to wait: Truecaller says up to 24 hours. 3. **Write to the app's grievance officer if your name or details still show.** What to write: Letter 2 below, question 6. What to attach: Screenshots. What you get back: An acknowledgement. How long to wait: 30 days. 4. **Get a lawyer if the stakes are high.** What to write: Nothing yet. Take your full file to the lawyer. What to attach: All of the above. What you get back: Advice on a legal notice, a claim before your State's IT Adjudicating Officer, or a civil suit for damages. How long to wait: Before you send any legal notice or file a suit. This page is not legal advice. ## What people tried and what worked - People used the app's unlisting page. - Unlisting is available according to the app's own page. Based on reports on public forums, and the news reports listed below. Paraphrased, with no usernames or personal details. What worked for one person may not work for you; the numbered steps above are the official route. ### News reports - [The company's statement on privacy in India.](https://www.hindustantimes.com/business/truecaller-clarifies-data-privacy-measures-in-place-for-users-in-india-101646991652404.html) (hindustantimes.com) **Not legal advice.** This page explains the rules in plain words so you can act. Consult a lawyer before you sue anyone or send a legal notice. Laws and portals change; check the linked official source. ## Step 1: stay safe and find out who it is 1. Do not share an OTP, PIN, password or card number. 2. Ask for their name, company, role and ID. Write it down. 3. Hang up and call the company on a number you find yourself, on its official website or app. 4. Ask whether this person works for the company or a partner. Ask for a written answer (Letter 1 below). ## If it is genuine: hold the company accountable ### What the company says, in its own words "Unlisting can't be reversed." Company's own words: [Truecaller: unlist phone number (company page)](https://www.truecaller.com/unlisting) "It can take up to 24 hours before your number gets removed due to caching processes. Numbers marked as spam cannot be unlisted." Company's own words: [Truecaller help: deactivate and unlist (company page)](https://support.truecaller.com/support/solutions/articles/81000392599-how-do-i-deactivate-unlist-my-phone-number-) These are Truecaller's own words from its pages, checked on 1 November 2026. Its help page says to deactivate first (Settings, then Privacy Center) and then use the unlisting link. ### Which rules this may break - **DPDP Act from 13 May 2027:** rights to access, correction and erasure (sections 11 and 12) apply to a company that decides why and how your data is processed. ### What the company must do, and by when - Process your unlisting or deletion request. - From 13 May 2027: answer access and erasure requests within its published time, no more than 90 days (rule 14). ### Letter 1: ask them to confirm who the caller is Send it through the official channel. Keep a copy and the acknowledgement. To: The Grievance Officer, \[Caller ID app company\] Subject: Please confirm whether this person works for you Dear Sir or Madam, I am your customer. My phone number: \[number\]. On \[date\] at \[time\] I received a call or message from \[phone number\]. This is not an official number. The person said they were \[name\], \[role or employee ID\], from the app. They knew my \[list the details they knew\]. Please confirm in writing within 7 days: 1. Whether this person is your employee, agent, partner or partner. 2. If yes, their name, role and the agency they work for. 3. Whether you allow staff or agents to contact customers from personal numbers. 4. If they are not connected with you, please say so, so I can report the number. Name: Registered mobile number: Date: ### Letter 2: ask how your data got there To: The Grievance Officer, \[Caller ID app company\] Subject: How did my personal data reach a personal phone? Complaint number \[if any\] Dear Sir or Madam, On \[date\] a person connected with you, \[name if known\], contacted me from a personal number \[number\] and knew my \[details\]. \[Describe what they did.\] Please tell me in writing: 1. What personal data about me this person could see, and through which system or app. 2. Whether you shared my data with any agency, partner, partner or processor, and their names. 3. How my data reached a personal phone or account outside your official systems. 4. What action you have taken against the person or agency, including suspension while you investigate. 5. What you have done to stop this happening again. 6. Where the name shown against my number came from. From 13 May 2027 the DPDP Act gives you the right to ask for erasure of personal data processed on the basis of consent (section 12). Until then, the app's own unlisting process is the main route. From 13 May 2027, sections 8 and 11 of the Digital Personal Data Protection Act, 2023 also apply. Please reply within 30 days. If I do not hear from you, I will escalate to from 13 May 2027, the Data Protection Board. Name: Registered mobile number: Date: ### Evidence to keep - Screenshots of calls and messages with numbers, dates and times. - Order, booking, policy or account numbers. - Your complaint numbers and the company's replies. - A note of what the caller knew or did. More in the [evidence checklist](https://dpdpr.in/rights/evidence-checklist/). ### Can you sue? What realistically happens - **Consumer Commission:** the most practical route for compensation. Cheap, no lawyer needed, file within 2 years. - **IT Act section 43A (until 13 May 2027):** if the company was negligent with *sensitive* personal data (passwords, bank or card details, health records, biometrics) and that caused wrongful loss or gain, it must pay compensation. Claims up to Rs 5 crore go to your State's IT Secretary acting as Adjudicating Officer (section 46); larger claims go to a court. Appeal within 45 days (section 57). Your phone number and address alone are not sensitive data under the 2011 Rules. - **Civil suit for damages:** possible, but slow and costly. Section 61 of the IT Act bars civil courts from matters the Adjudicating Officer can decide. - **Police:** only where there is a crime, for example a person who disclosed your information in breach of a contract to cause wrongful loss or gain (IT Act section 72A, up to 3 years), identity theft (66C), cheating by impersonation (66D), stalking or threats. - **Realistic outcome:** most people get results from a firm written complaint and the regulator or ombudsman. Courts take years. Consult a lawyer before suing. ### From 13 May 2027: the Data Protection Board From **13 May 2027** the DPDP Act's duties apply. The company is responsible for processing done by it or by anyone processing on its behalf (section 8(1)), may use a processor only under a valid contract (section 8(2)), must protect your data with reasonable security safeguards (section 8(5)), and must tell you and the Board about a breach (section 8(6)). It may use your data only for the lawful purpose you agreed to (sections 4 to 6). Section 44(2) removes IT Act section 43A from that date. Complain to the company first; if it does not resolve it, complain to the Data Protection Board. The Board can impose penalties up to Rs 250 crore, but **penalties go to the Government (the Consolidated Fund of India, section 34), not to you**. For money, use the ombudsman or the Consumer Commission. Appeals from the Board go to TDSAT within 60 days (section 29). ## If it is fake: urgent steps 1. If anyone asks for an OTP, PIN or payment, stop. It may be fraud. 2. Call 1930 if money was lost, then file on cybercrime.gov.in. 3. Report the number on Chakshu (Sanchar Saathi). Step by step guides: Use your DPDP rights (from 13 May 2027) ### Use your DPDP rights (from 13 May 2027) The rights in sections 11 to 14 of the DPDP Act, and the duties of companies that go with them, start on 13 May 2027 (G.S.R. 843(E)). Until then you can still write to a company and ask. Many will answer. But they are not yet bound by these sections. **Keep this ready before you start:** - The company's published method for rights requests. Rule 14 says companies must show it on their website or app. - The identifier they ask for, such as your username, customer ID or registered mobile number. 1. Find the company's rights or grievance page, or its Data Protection Officer contact. 2. Send a written request using the method they publish. Use our [request letter template](https://dpdpr.in/rights/rights-request-letter/). 3. Ask for what you need: a summary of your data and how it is used, and the names of everyone it was shared with (section 11); correction, completion, updating or erasure (section 12); or a fix for a grievance (section 13). You can also nominate someone to act for you after death or incapacity (section 14), and withdraw consent (section 6(4)). 4. Save the acknowledgement or ticket number. 5. Wait for the time they publish. Rule 14(3) says it cannot be more than 90 days. 6. If they refuse or do not answer, you can complain to the Data Protection Board of India. You must use the company's grievance route first (section 13(3)). 7. The Board works as a digital office. Use the method it publishes on its website and app (rule 19). We will add the link when the Board publishes it. Checked on 1 November 2026 against: [Digital Personal Data Protection Act, 2023 (MeitY copy of the Gazette)](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf), [Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E))](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf), [G.S.R. 843(E): start dates for the Act](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf). ## Related guides - [\*\*Spam calls, SMS and telemarketing\*\*Block marketing, complain within 7 days, and report fraud calls on Chakshu.](https://dpdpr.in/rights/spam-calls-sms/) - [\*\*Social media and messaging apps\*\*Fake profiles, hacked accounts, leaked photos and the Grievance Appellate Committee.](https://dpdpr.in/rights/social-media/) See also [when a platform shares your data with a third party](https://dpdpr.in/rights/platforms-and-third-parties/) and the [escalation ladder](https://dpdpr.in/rights/escalation-ladder/). ## Official sources Checked on 1 November 2026. Company pages are labelled as the company's own words. - [Truecaller: unlist phone number (company page)](https://www.truecaller.com/unlisting) - [Truecaller help: deactivate and unlist (company page)](https://support.truecaller.com/support/solutions/articles/81000392599-how-do-i-deactivate-unlist-my-phone-number-) - [Digital Personal Data Protection Act, 2023 (MeitY copy of the Gazette)](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf)