Home / Guide / Privacy guide

Privacy guide

How to track expenses without giving any app SMS access

Most popular expense apps in India lean on SMS permissions to auto-log transactions. If you'd rather not grant that access, here's how the alternatives work.

Open in Telegram

Free tier · 20 messages and 2 questions per day

Granting SMS read access to an app is one of the broadest permissions on a modern phone. It exposes every OTP, every bank alert, every personal message. Even when the developer is well-intentioned, the surface area is large enough that many users prefer to keep it locked down.

Google has also tightened the policy: only apps in narrow categories can ask for SMS_READ on the Play Store, and the dialog Android shows is intentionally alarming. If you've decided to never grant it, your options for expense tracking shift accordingly.

What you give up

Auto-logging. Every UPI / card / wallet transaction will require a manual entry. That sounds painful — but the actual cost depends on how fast the entry is. Spreadsheets are slow; bots are fast.

What you gain

Three approaches that work without SMS access

  1. A Telegram bot. You text the bot whatever you spent in plain English. The bot parses and stores it. Logging takes 3 seconds. Hisaab is one example.
  2. A note-taking app + monthly review. Drop a one-line note in Notes / Apple Reminders / Google Keep every time you spend. At month-end, transcribe to a spreadsheet. Works but is slow at the analysis end.
  3. A full PFM app in manual mode. ETMoney and similar will let you skip permissions and manually enter expenses. Works fine; the friction floor is higher than a bot.

What about UPI?

Most UPI apps (PhonePe, GPay, Paytm) show a personal transaction history inside the app itself. You can scroll back through it without granting any outside app permissions. Combined with manual logging for cash and occasional reconciliation, this is a workable pattern.

Frequently asked

Does Hisaab need any phone permissions?
No. Hisaab is a Telegram bot — it lives entirely inside Telegram and has no presence on your phone outside that messaging app. No SMS, no notifications, no contacts, no location.
Will I have to type every expense?
Yes. The trade-off for skipping SMS permissions is manual entry. The pragmatic mitigation: pick a tool with the lowest possible friction (a bot is faster than an app is faster than a spreadsheet).
Can I track UPI without granting permissions?
Yes — most UPI apps show transaction history natively. You can review what you spent at month-end and back-fill into your tracker. The catch: you'll lose granularity (was that ₹450 a Swiggy order or a fuel top-up?), so logging at the moment of spending is still better.
Is granting SMS permission really that risky?
It's a judgement call. The technical risk is real — any app with that permission can read OTPs and bank alerts in real time. The practical risk depends on the trust you place in the developer. For users who'd rather not make that judgement, manual-entry tools sidestep the question entirely.

Try Hisaab — free, no install.

Open in Telegram