PhonePe exposes transaction data via APIs. https://www.phonepe.com/pulse/

Are there any privacy concerns here?

I believe data is anonymous and is largely aimed at data scientists who are interested in bigger picture. Although I’d hope Google Pay would expose this too!