Privacy guide

Why do online forms always ask for your phone number?

Why Indian websites and apps push for your phone number, how it becomes an identity and marketing key, and when you can safely skip it.

The simple answer

Phone numbers are requested so often because they are a strong identity key in India. A number can verify you with an OTP, connect your activity across services and become a reliable way to reach you later.

That same usefulness is the privacy risk. Once your number is in, it can flow into marketing, sales, analytics and partner systems, which is why spam often starts after one form.

What to check

1
Ask whether the number is truly required.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Check if marketing consent is bundled with the number.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Look for sharing or partner language in the policy.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Use a secondary number for low-trust signups.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

A phone number connects everything.

State of Privacy treats phone numbers as identity keys because they can link visits, purchases, ads and follow-up calls across very different places.

What to do next

1
Skip the number when a field is optional.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Keep a separate number for signups and offers.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Ask companies how your number is used and shared.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

Do I have to give my phone number?

Often it is not strictly required. Check whether the field is optional or only needed for OTP verification.

Why does spam start after I share my number?

Your number can move into marketing, sales and partner systems after a single form.

How do I protect my main number?

Use a secondary number for low-trust signups and keep marketing consent separate.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience