The Lagos State High Court has dismissed a \u20a6300 million privacy claim against Truecaller, ruling that the claimants did not provide credible evidence that their constitutional right to privacy was breached. The decision, delivered on September 14, 2026 by Justice N. O. Ojuromi, also means the court refused to stop Truecaller from processing the data in question or to order the company to delete information it already holds.<\/p>\n
The case Incorporated Trustees of Data Privacy Lawyers Association & Others v. Truecaller International LLP, put Nigeria\u2019s data-protection rules, consent, caller ID technology and public safety under the same microscope. The applicants wanted \u20a6200 million in general damages and \u20a6100 million in exemplary damages. They also sought injunctions to bar Truecaller from collecting, storing, sharing or processing non-users\u2019 phone numbers without consent, and to force the company to permanently delete any non-user data it had.<\/p>\n
The court was not convinced. It held that the applicants had failed to prove an actionable infringement of their rights. That finding mattered because it separated two issues: whether Truecaller had consent from non-users, and whether the applicants had actually shown a privacy violation serious enough to justify damages or orders against the company.<\/p>\n
On consent, the court sided with the applicants in part. It rejected Truecaller\u2019s argument that a user\u2019s consent could automatically count as consent from a non-user whose details appeared in that user\u2019s contacts. Truecaller had told the court that contact information may be uploaded when users voluntarily turn on its Enhanced Search feature, available in some non-store versions of the app. Users who activate it must confirm they are authorised to share their contact lists. But the court held that this was not enough, on its own, to establish implied consent from the non-user.<\/p>\n
That point reinforces a key principle under Nigeria\u2019s data-protection framework: consent is personal. One person cannot simply consent on behalf of another. Even so, Truecaller argued that consent is not the only lawful basis for processing. It also relied on public-interest and legitimate-interest grounds under Section 25 of the Nigeria Data Protection Act 2023, as well as the public-safety role played by caller identification, spam detection and fraud prevention.<\/p>\n
The court considered how Truecaller\u2019s service works. Its core model is \u201cnumber-for-name\u201d: someone searching the platform must already have a phone number before the associated caller identity can be shown. The court found this relevant to whether the applicants had shown real injury from the processing they complained about. In the end, it held they had not established the infringement needed for the remedies they sought.<\/p>\n
Public safety was also featured in the judgment. Truecaller argued that its caller ID, spam detection and fraud screening help people spot suspicious, unsolicited or potentially malicious calls before they answer. The company said the service protects millions of Nigerians, including elderly people who are often targeted by fraudsters. The court recognised this public-safety function as one of the purposes for which the platform processes information. It also referred to Section 45(1) of the Constitution, which allows certain fundamental rights to be limited by laws that are reasonably justifiable in a democratic society in the interest of public safety and the protection of others\u2019 rights.<\/p>\n
A Truecaller spokesperson welcomed the ruling. \u201cThe Lagos State High Court dismissed the suit and refused the reliefs sought,\u201d the spokesperson said. \u201cWe welcome the court\u2019s recognition that caller identification and spam detection serve an important public-safety purpose in protecting Nigerians from scams, fraud and harassment.\u201d<\/p>\n
Still, the court did not give Truecaller everything it wanted. It rejected the company\u2019s argument that an app user\u2019s consent or representations could automatically amount to consent from people in that user\u2019s contact list. That finding could matter for how data controllers treat contact-upload features in Nigeria.<\/p>\n
But the court also refused the applicants\u2019 requests for prohibitory and mandatory injunctions. It did not order Truecaller to suspend its Nigerian operations, disable caller ID, redesign its contact-upload permissions or introduce direct consent prompts for non-users. It also declined to compel the company to delete the data it holds.<\/p>\n
Truecaller said it will continue operating its caller-identification and spam-protection service in Nigeria while meeting its privacy and data-protection obligations. The company insists it does not automatically upload a user\u2019s address book just because the app is installed. Enhanced Search, it says, is optional and available in certain versions obtained outside major app stores. When a user activates it, the user expressly confirms they are authorised to share the relevant contact information.<\/p>\n
For non-users who do not want their caller identity to remain available, Truecaller offers an unlisting process. A person can visit the company\u2019s unlisting portal, enter their phone number with the country code, complete security verification and request removal. Truecaller says the number and associated identity information are permanently removed from its active searchable database within 24 hours. After that, it keeps a one-way cryptographic hash of the number. According to the company, the hash cannot be reversed to reconstruct the original number and is kept only to stop an unlisted number from being accidentally reintroduced if it later appears in an uploaded contact list. People with unlisting or other privacy problems can also use Truecaller\u2019s grievance and data-protection channels.<\/p>\n
Nigerian users and data subjects can direct privacy enquiries to Truecaller\u2019s legal and privacy teams, including its designated Nigeria privacy contact.<\/p>\n
The ruling adds to Nigeria\u2019s growing body of privacy and data-protection case law under the Nigeria Data Protection Act 2023. Its real significance may lie in the way it separates three questions: whether one person can consent for another; whether other lawful grounds justify processing; and whether an applicant has actually proved an infringement serious enough to warrant judicial relief.<\/p>\n
On the first, the court said no: a user\u2019s consent is not automatically a non-user\u2019s consent. On the last, it found the applicants had not proved their case with enough evidence. So the suit was dismissed, the \u20a6300 million damages claim was refused, and Truecaller was not ordered to stop processing data or delete what it holds. The company\u2019s caller-ID service remains operational in Nigeria, while the judgment serves as a reminder that consent, privacy safeguards and clear legal bases for processing personal data still matter.<\/p>\n","protected":false},"excerpt":{"rendered":"
The Lagos State High Court has dismissed a \u20a6300 million privacy claim against Truecaller, ruling that the claimants did not provide credible evidence that their constitutional right to privacy was breached. The decision, delivered on September 14, 2026 by Justice N. O. Ojuromi, also means the court refused to stop Truecaller from processing the data […]<\/p>\n","protected":false},"author":14,"featured_media":86358,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[5],"tags":[],"class_list":["post-92750","post","type-post","status-publish","format-standard","has-post-thumbnail","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t