As lending apps require users to grant them access to contacts, location, stored files, and other mobile data as part of their T&Cs, a black market in user details has begun to thrive in China.