'Need access to my SMS': Zerodha's Nithin Kamath slams net banking apps, says Kite requires no permissions

Kamath said Zerodha’s Kite works without permissions. (Image credit: File image)

• Nithin Kamath slams net banking apps for intrusive permissions
• Kamath says Zerodha's Kite app requires zero mobile permissions
• Kamath raises privacy issues, praises SEBI's 2FA system

Did our AI summary help?

Zerodha co-founder Nithin Kamath has called out net banking apps for being intrusive, primarily due to the host of permissions they require to operate on a user's smartphone.

Nitin Kamath, co-founder of Zerodha, called out net banking apps, stating that they can be intrusive as they demand many permissions from users’ devices.

In a social media post, Kamath said he does not use online apps and criticised their requests for access to SMS, contacts, and other device permissions.

"I don't use net banking apps on my phone because the mandatory permissions they ask for make no sense," wrote Kamath in an X post.

"Why does a banking app need access to my SMS, phone, contacts, etc., in the name of security, when not seeking invasive device permissions is, in fact, the global benchmark for cybersecurity. This is called the Principle of Least Privilege (PoLP)," he added.

Kamath compared these apps, with Zerodha’s Kite, saying it works without any mobile permissions and sets a higher standard for user privacy.

I don't use net banking apps on my phone because the mandatory permissions they ask for make no sense.

Why does a banking app need access to my SMS, phone, contacts, etc., in the name of security, when not seeking invasive device permissions is, in fact, the global benchmark… — Nithin Kamath (@Nithin0dha) March 17, 2026

"This is exactly why we've built Zerodha the way we have. Kite asks for ZERO permissions on mobile, for instance, and this is one of the big reasons why millions of people trust us," he said.

"What has enabled us is SEBI's mandatory strong two-factor authentication framework, which strikes the right balance between security and privacy."

As Kamath’s post went viral, some users agreed with him, while others said the permissions are needed for security.

One user wrote, “It's for more convenience, like auto-filling OTP when it comes as SMS, auto-propagating contacts in the quick pay option in their UPI, calling customer care directly from the app, etc. However, it should not be mandatory, and if the customer wants to give access, then it can be made mandatory.”

Another user said, “I get tons of notifications from banking apps, stuck between convenience and privacy. Zerodha, good job using the platform for a while, just I get tons of emails from you, which is annoying, cdsl, ndsl, this form that form, etc.”

A third X user added, “That's why I always prefer Zerodha over other net banking apps.”