🔗 Share this article

In a significant decision, India's telecommunications department has privately instructed smartphone companies to preload all new devices with a national cybersecurity app that must remain installed. This order, which has come to light, is set to alarm major technology companies like Apple and prompt questions among privacy advocates.

An International Trend in Cybersecurity Regulation

To combat a recent surge of online fraud and phone theft, India is following authorities across the globe. This step mirrors similar rules introduced in countries like Russia, which are designed to curb the use of lost phones for illicit activities and push government-developed service apps.

What Companies Are Impacted by the Directive?

The new directive applies to leading smartphone brands operating in the domestic market. Among them are Apple, which has in the past had disagreements with the telecom authority over similar apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Government Order

An order dated 28 November provides phone companies a 90-day period to ensure that the government's Sanchar Saathi application is factory-loaded on all new handsets. A key condition is that users will not be able to remove the app.

For handsets currently in the supply chain, companies are required to send the application via software patches. It is notable that this order was sent confidentially and was communicated privately to specific firms.

Digital Rights Concerns Voiced

However, legal experts have raised serious apprehensions regarding this decision. A lawyer focusing in tech issues said that India's directive is a cause for concern.

“The government practically removes user consent as a meaningful choice,” stated Mishi Choudhary, an advocate working on internet rights issues.

Consumer organisations had previously criticised a comparable mandate by Russia in August for a state-backed messenger app to be included on phones.

The Size of the Domestic Smartphone Landscape

India, one of the world's biggest mobile markets, boasts over 1.2 billion connections. Official data reveal that the cybersecurity application, launched in January, has already helped locating more than 700,000 lost phones, with around 50,000 found in October alone.

The government contends that the tool is essential to fight the “significant endangerment” of mobile network cybersecurity from cloned or spoofed IMEI numbers, which are used for illicit activities and network abuse.

Apple's Stance

Apple's iOS powers an estimated 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per market research. While Apple includes its own first-party apps on its devices, its internal guidelines are said to prohibit the inclusion of any government app before the purchase of a device.

“Apple has historically refused these kinds of mandates from governments,” commented Tarun Pathak, a research director at Counterpoint.

“It’s probable to pursue a middle ground: instead of a mandatory pre-install, they might negotiate and ask for an option to prompt users towards installing the app.”

Queries for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecoms department also did not respond.

The Role of the IMEI and the Application's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is most commonly used by carriers to block cellular access for phones flagged as lost.

The government application is mainly designed to help users block and locate missing phones across all mobile carriers, using a national registry. It also allows them to detect, and terminate, illegal mobile connections.

Notable Adoption and Results

With over 5 million installs since its inception, the software has already been used to block over 3.7 million stolen or lost mobile phones. Furthermore, more than 30 million illegal connections have also been disconnected through its use.

The authorities asserts that the tool aids in combating cyberthreats and assists in the locating and disabling of lost or stolen phones, thereby aiding police in tracing handsets and keeping counterfeits out of the black market.