🔗 Share this article

In a major move, India's telecommunications department has privately asked mobile phone makers to pre-install all new phones with a state-owned cybersecurity app that must remain installed. This directive, which has come to light, is set to concern major technology companies like Apple and prompt concerns among digital rights groups.

An International Shift in Cybersecurity Policy

To combat a recent surge of online fraud and phone theft, The Indian authorities is aligning with authorities worldwide. This move parallels comparable regulations enacted in countries like Russia, which seek to curb the use of lost phones for fraud and push official applications.

What Companies Are Bound by the Directive?

The new directive affects leading mobile phone makers active in the Indian market. These include Apple, which has in the past clashed with the telecom authority over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Details of the Government Order

An order dated 28 November allots smartphone companies a 90-day period to ensure that the official Sanchar Saathi application is included on all new devices. A notable condition is that users are prevented from deleting the app.

For devices already in the retail pipeline, makers are required to deliver the app via software updates. It is important that this directive was sent confidentially and was communicated privately to chosen firms.

Digital Rights Worries Voiced

However, legal experts have expressed significant concerns regarding this decision. A lawyer focusing in technology matters commented that India's directive is a reason to worry.

“The government in essence erodes user consent as a meaningful choice,” said Mishi Choudhary, an expert working on digital advocacy matters.

Privacy advocates had also condemned a similar requirement by Russia in August for a state-backed messenger called Max to be pre-installed on phones.

The Scale of the Indian Market

India, one of the world's biggest telephone markets, boasts more than 1.2 billion connections. Government figures reveal that the cybersecurity application, introduced in January, has reportedly assisted in locating more than 700,000 lost phones, with an estimated 50,000 recovered in October alone.

The authorities argues that the app is essential to tackle the “significant endangerment” of telecom cybersecurity from cloned or tampered IMEI numbers, which are used for illicit activities and system abuse.

The Tech Giant's Position

Apple's iOS powers an estimated 4.5% of the 735 million smartphones in India, with the vast majority using Android, according to market research. While Apple pre-installs its own first-party applications on its devices, its company guidelines are said to ban the installation of any third-party application before the sale of a smartphone.

“Apple has traditionally declined such requests from authorities,” noted Tarun Pathak, a research director at Counterpoint.

“It’s expected to pursue a compromise: rather than a compulsory inclusion, they might negotiate and ask for an option to encourage users towards installing the app.”

Queries for response from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecommunications ministry also did not respond.

The Role of the IMEI and the Application's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each handset. It is typically used by networks to disable cellular access for phones reported as stolen.

The government application is chiefly created to help users block and track lost or stolen phones across all mobile carriers, using a national database. It also allows them to spot, and disconnect, illegal mobile connections.

Impressive Usage and Outcomes

With more than 5 million installs since its launch, the software has already been used to disable over 3.7 million stolen or lost mobile phones. Moreover, over 30 million illegal connections have also been blocked through its use.

The government asserts that the software aids in preventing cyberthreats and assists in the tracking and disabling of lost or stolen phones, thereby aiding police in tracing handsets and keeping counterfeits out of the black market.