India Directs Phone Makers to Preload Handsets with State-Owned Cybersecurity App

In a major step, India's telecoms ministry has confidentially asked mobile phone makers to preload all new phones with a state-owned cybersecurity application that is non-removable. This order, which has come to light, is set to alarm major tech companies like Apple and raise questions among privacy advocates.

A Global Shift in Cybersecurity Policy

To combat a growing wave of online fraud and hacking, The Indian authorities is joining regulators across the globe. This action mirrors similar regulations enacted in countries like Russia, which are designed to prevent the use of lost phones for illicit activities and encourage government-developed tools.

Which Companies Are Impacted by the Directive?

The recent directive applies to leading mobile phone companies active in the Indian market. This encompasses Apple, a company that has previously locked horns with the telecom authority over similar apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Government Mandate

An directive dated 28 November gives smartphone companies a three-month period to ensure that the official Sanchar Saathi application is included on all new devices. A notable provision is that owners are prevented from deleting the software.

For devices already in the retail pipeline, makers are instructed to push the application via software upgrades. It is important that this order was privately circulated and was dispatched selectively to specific firms.

Digital Rights Apprehensions Expressed

However, legal specialists have expressed serious apprehensions regarding this policy. A legal expert specialising in technology law stated that India's action is a worrying development.

“The government effectively eliminates user consent as a genuine choice,” said Mishi Choudhary, an expert working on internet advocacy issues.

Consumer organisations had also condemned a comparable mandate by Russia in August for a government-sponsored messenger app to be included on phones.

The Scope of the Indian Smartphone Landscape

India, among the world's largest telephone markets, boasts more than 1.2 billion connections. Official figures reveal that the Sanchar Saathi application, introduced in January, has reportedly assisted in tracking down more than 700,000 lost phones, with approximately 50,000 found in October alone.

The government states that the software is crucial to combat the “serious endangerment” of telecom cybersecurity from cloned or spoofed IMEI numbers, which are used for fraud and network misuse.

The Tech Giant's Likely Response

Apple's iOS runs on an approximate 4.5% of the 735 million smartphones in India, with the vast majority using Android, as per industry analysis. While Apple includes its own first-party applications on its devices, its company policies are said to ban the inclusion of any third-party app before the purchase of a device.

“Apple has traditionally refused these kinds of requests from governments,” said Tarun Pathak, a analyst at Counterpoint.

“It’s expected to aim for a middle ground: instead of a compulsory pre-install, they might discuss and propose an alternative to prompt users towards installing the application.”

Queries for comment from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications ministry also remained silent.

The Role of the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each mobile device. It is most commonly used by carriers to cut off network access for phones reported as lost.

The government app is mainly designed to help users block and track lost or stolen smartphones across all mobile carriers, using a national registry. It also enables them to spot, and terminate, unauthorised mobile connections.

Notable Usage and Results

With more than 5 million installs since its launch, the app has already been used to block more than 3.7 million stolen or lost mobile phones. Moreover, over 30 million fraudulent connections have also been terminated through its use.

The government states that the tool helps combating digital threats and assists in the tracking and disabling of missing phones, thereby helping police in tracing devices and keeping counterfeits out of the illicit trade.