eGovPH App Privacy: Is Your Personal Data Secure?

Because the eGovPH super app integrates multiple government systems, it holds access to your personal details, biological data, and financial transactions. This has raised natural questions among citizens: Is eGovPH secure? How is my personal data protected? This article analyzes the safety measures implemented by the Department of Information and Communications Technology (DICT) to protect users.

Compliance with the Data Privacy Act

The eGovPH app operates under the strict guidelines of Republic Act No. 10173, also known as the Data Privacy Act of 2012. Under this law, the DICT is designated as a personal data controller. This means they are legally bound to protect your information and cannot share it with third parties or use it for unauthorized purposes without your consent.

Security Technologies Implemented

To prevent unauthorized access and data leaks, the app utilizes several security layers:

End-to-End Encryption: All data transmitted between the app on your phone and the government servers is encrypted using Secure Socket Layer (SSL) protocols, preventing intercept attacks.
Biometric Security: Face verification and fingerprint logins ensure that a physical thief cannot open the app even if they know your phone's lock screen password.
No Local Data Storage: Sensitive credentials (like your digital National ID and driver's license) are not stored directly on your phone's memory. Instead, they are fetched from secure government servers in real-time when you view them, reducing the risk if your device is lost or stolen.
Strict Device Checks: The app detects and blocks devices that are rooted or jailbroken, as these devices are highly vulnerable to spyware and background hacking tools.

How to Keep Your Account Safe

While the DICT manages server security, you are responsible for securing your device. Follow these habits:

Never share your 6-digit MPIN or OTP with anyone. DSWD, PhilHealth, or bank staff will never ask for these codes.
Do not download unofficial versions of the app from blogs or file-sharing sites. Only install the app from the official Google Play Store or Apple App Store.
Log out of the app if you plan to lend your phone to someone else.