NBFC Taking Mobile Contacts

No possibility. It requires your positive affirmations.

1) They cannot access your contacts 2) If they have accessed your contacts with your permission in that case they cannot use those contacts to harass you.

1. if you have given them the permission to have access to your contacts at the time of installing their APP, they can reach out the contacts but they cannot misuse the permission given by you, 2. you can lodge a formal complaint against them for violation of privacy

no they can't do so