Truecaller: a complete removal guide and what they actually have on you.

Truecaller is the single largest exposure for most Indian mobile users. Founded in Stockholm in 2009, headquartered in India for tax and regulatory purposes since 2024, and listed publicly in Sweden, Truecaller operates a crowdsourced caller identification database that contains, by our estimates, identity records for around three hundred million Indian phone numbers. If you have ever used a mobile phone in India for more than a few years, you are almost certainly in it.

What Truecaller has on you.

The Truecaller database links a phone number to one or more identity attributes. For Indian residents, the typical attribute set includes:

• Name as displayed in other users' contact lists. This is often the most accurate, sometimes alarmingly so (your spouse's name for you, your nickname from college, the name your bank assigned you).
• Photograph, if it has been linked from a Truecaller account profile, from social media you have connected, or from another user's contact entry.
• Email addresses, if they have been associated through any of the above.
• Tags like "spam", "telemarketer", or business labels, contributed by other users.
• Approximate location, inferred from area codes, IP-geolocation, or explicit user input.

The most uncomfortable fact about Truecaller is that you do not have to have used the app to be in it. Other people's contact list uploads are sufficient. This is the core legal vulnerability of the platform under DPDP, because consent under the Act has to come from the Data Principal whose data is being processed, not from someone else's contact list.

The unlisting process.

Truecaller maintains a public unlisting page at truecaller.com/unlisting. The form asks for your phone number with country code, optionally an email, and a checkbox to confirm you control the number. Submission triggers an OTP to the number for verification.

Once verified, the platform's policy is to remove your number from the searchable database within twenty-four hours. In our experience, the actual delay is usually under an hour for the primary record. Cached copies in user app installations may take up to thirty to sixty days to clear, because the app does not refetch the entire local database on every query.

Unlisting alone removes the searchability of your number. It does not necessarily delete all of Truecaller's internal records. For full deletion under Section 12 of the DPDP Act, you have to follow up with an erasure request.

The Section 12 follow-up.

After unlisting, send a Section 12 erasure request to Truecaller's grievance officer. The current grievance officer contact is published on truecaller.com (we keep our directory updated). The request should explicitly demand:

1. Full erasure of all personal data associated with the phone number, including but not limited to name, photograph, email, location, tags, and any inferred attributes.
2. Erasure of any data associated with email addresses you have used with the platform.
3. Confirmation that any third parties (advertising partners, identity-verification customers, B2B contact-resolution buyers) have been instructed to delete derived data.
4. A written response within ninety days as required by Rule 14.

Truecaller's compliance with the second and third demands has been variable. We have seen confirmations of erasure of name and photograph that omit confirmation about advertising partners. If you receive an incomplete confirmation, follow up specifically on the missing items.

What to do if you cannot verify the number.

A common scenario: you changed your number five years ago, you no longer have access to the old SIM, but you suspect the old number is still associated with your identity in Truecaller's database. The unlisting form requires OTP verification, which fails.

In this case, send a Section 12 request via email, attaching a sworn affidavit that you previously held the number, copies of two old utility bills or bank statements showing the number associated with your name, and an authorisation for Truecaller to delete all records linked to that historical number. The success rate on this is around seventy percent. Truecaller has discretion to refuse if the verification is insufficient; if they refuse, escalate to the DPB.

What to do if your photo is on Truecaller via someone else's upload.

This is the hardest scenario. You did not give Truecaller anything; another user's contact-list upload included your photo with your name. To remove it:

1. Identify the specific record by searching your own name and number on Truecaller (you can do this even if you do not use the app, via a friend's account or via the trial search).
2. Capture a screenshot of the record showing your photo and the source attribution.
3. Send a Section 9 / Section 12 notice (if you are a minor, Section 9 applies; if you are an adult, Section 12 alone) demanding erasure of the photograph and any tied attributes.
4. Specifically invoke Section 6 of the Act: consent for processing must come from the Data Principal. Another user uploading a contact list is not your consent.

Truecaller has historically removed such records within thirty days when invoked properly. The success rate here is high (over ninety percent) because the legal argument is straightforward and well-documented.

What we do on Truecaller for you.

On the Personal plan, Vault.in runs the following on your behalf:

1. Initial unlisting via the platform's verification flow (we walk you through the OTP if needed; we do not store the OTP).
2. Section 12 erasure request to the grievance officer.
3. Verification scan thirty days later to confirm the record is gone.
4. Quarterly re-scan to detect re-appearance (which does happen; we have observed roughly five percent of removed Truecaller records re-appear within twelve months, typically because another user uploads an old contact list).
5. Automatic re-removal if a record re-appears.

The cost of doing this manually, in our estimate, is about two hours of attention from you, spread across thirty days. The cost of letting it sit is your phone number remaining in a database that processes around fifty billion lookups a year, including by scammers running reverse lookups.

If your phone number is exposed on Truecaller, run a free scan to see what else is also exposed in adjacent platforms, then decide.