That change, which we explained in detail in March, is the doorway into a bigger subject: what data Safaricom actually holds on you, who can see it, and what the law lets you do about it. The middle digits of your phone number are masked, meaning hidden, so the recipient cannot simply save your number and call you. In plain language, Safaricom holds:Your identity details: name, ID number, date of birth, address and photograph. Write to dpo@safaricom.co.ke with your name, ID number and phone number, and say what you want: a copy of your data, a correction, or a deletion. Share this with someone who uses M-PESA: Never share your M-PESA PIN.