India Directs Phone Makers to Pre-install Handsets with National Cybersecurity App

In a notable move, India's telecommunications authority has discreetly directed mobile phone companies to preload all new devices with a government-backed cybersecurity application that must remain installed. This mandate, which has come to light, is likely to concern leading tech firms like Apple and raise concerns among digital rights groups.

An International Shift in Digital Security Policy

In tackling a rising tide of cybercrime and hacking, India is following regulators worldwide. This step mirrors comparable measures enacted in countries like Russia, which aim to prevent the use of stolen phones for scams and push state-backed tools.

What Manufacturers Are Affected by the Order?

The new directive affects key smartphone makers active in the Indian market. Among them are Apple, a company that has in the past clashed with regulators over comparable apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Government Order

An order dated 28 November allots smartphone companies a three-month window to guarantee that the official "Messenger Friend" app is factory-loaded on all new handsets. A notable provision is that owners will not be able to remove the software.

For phones currently in the retail pipeline, manufacturers are instructed to send the app via software upgrades. It is important that this order was not made public and was sent selectively to specific manufacturers.

Digital Rights Worries Expressed

However, technology experts have raised serious apprehensions regarding this decision. A lawyer focusing in technology law commented that India's directive is a reason to worry.

“The government practically eliminates user consent as a meaningful choice,” said Mishi Choudhary, an expert working on digital rights issues.

Digital rights groups had earlier condemned a comparable mandate by Russia in August for a government-sponsored communication called Max to be pre-installed on phones.

The Scope of the Domestic Smartphone Landscape

India, one of the world's biggest telephone markets, boasts more than 1.2 billion connections. Official figures indicate that the Sanchar Saathi app, introduced in January, has reportedly assisted in locating over 700,000 lost phones, with around 50,000 recovered in October by itself.

The authorities argues that the tool is crucial to tackle the “serious endangerment” of telecom cybersecurity from duplicate or spoofed IMEI numbers, which enable scams and network misuse.

Apple's Likely Response

Apple's iOS powers an estimated 4.5% of the 735 million smartphones in India, with the rest using Android, as per market research. While Apple pre-installs its own first-party apps on its devices, its company rules reportedly forbid the inclusion of any government app before the sale of a smartphone.

“Apple has in the past refused these kinds of requests from authorities,” noted Tarun Pathak, a research director at Counterpoint.

“It’s expected to aim for a negotiated solution: rather than a mandatory inclusion, they might negotiate and propose an option to encourage users towards downloading the application.”

Queries for response from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecoms ministry also remained silent.

The Role of the IMEI and the Application's Purpose

The IMEI, or International Mobile Equipment Identity, is a unique identification number assigned to each mobile device. It is typically used by carriers to disable cellular access for phones flagged as lost.

The Sanchar Saathi app is chiefly designed to help users block and locate missing smartphones across all mobile carriers, using a national registry. It also enables them to spot, and block, unauthorised mobile connections.

Impressive Adoption and Outcomes

With more than 5 million downloads since its release, the app has already been used to block over 3.7 million missing mobile phones. Moreover, over 30 million illegal connections have also been blocked through its use.

The authorities claims that the software helps combating cyberthreats and assists in the locating and blocking of missing phones, thereby helping police in tracing handsets and keeping cloned devices out of the illicit trade.

Rachel Hernandez
Rachel Hernandez

A full-stack developer specializing in modern JavaScript frameworks and cloud architecture, with over a decade of industry experience.