🔗 Share this article

In a significant move, India's telecoms authority has confidentially directed smartphone companies to preload all new devices with a national cybersecurity app that must remain installed. This order, which has come to light, is expected to antagonise major technology companies like Apple and prompt questions among privacy advocates.

A Global Pattern in Cybersecurity Regulation

Addressing a rising tide of online fraud and device misuse, The Indian authorities is joining governments worldwide. This move echoes recent measures introduced in nations like Russia, which seek to curb the use of lost phones for fraud and encourage government-developed service apps.

What Companies Are Impacted by the Directive?

The recent order affects major mobile phone brands active in the Indian market. This encompasses Apple, a company that has in the past locked horns with the telecom authority over similar apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Government Mandate

An directive dated 28 November gives smartphone manufacturers a 90-day window to ensure that the government's Sanchar Saathi app is included on all new devices. A key condition is that consumers are prevented from deleting the app.

For phones currently in the retail pipeline, manufacturers are required to push the app via system updates. It is important that this directive was sent confidentially and was dispatched in confidence to specific manufacturers.

Privacy Apprehensions Raised

However, legal experts have expressed major worries regarding this policy. A lawyer focusing in tech matters commented that India's action is a cause for concern.

“The government in essence eliminates user consent as a meaningful choice,” stated Mishi Choudhary, an advocate working on digital rights issues.

Digital rights groups had earlier criticised a comparable mandate by Russia in August for a state-backed communication called Max to be pre-installed on phones.

The Size of the Domestic Smartphone Landscape

India, one of the world's largest mobile markets, boasts over 1.2 billion connections. Government figures show that the cybersecurity application, launched in January, has reportedly helped recovering over 700,000 lost phones, with an estimated 50,000 found in October by itself.

The authorities contends that the software is crucial to combat the “grave endangerment” of telecom cybersecurity from cloned or tampered IMEI numbers, which enable fraud and system abuse.

Apple's Position

Apple's iOS powers an approximate 4.5% of the 735 million smartphones in India, with the vast majority using Android, according to market research. While Apple pre-installs its own first-party applications on its devices, its internal rules are said to forbid the inclusion of any government application before the sale of a smartphone.

“Apple has traditionally refused such mandates from authorities,” said Tarun Pathak, a analyst at Counterpoint.

“It’s likely to seek a negotiated solution: instead of a forced pre-install, they might negotiate and ask for an option to prompt users towards downloading the application.”

Queries for response from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecommunications department also remained silent.

Understanding the IMEI and the Application's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each handset. It is most commonly used by carriers to cut off cellular access for phones flagged as stolen.

The government app is chiefly designed to help users track and track lost or stolen smartphones across all telecom networks, using a national database. It also lets them to detect, and block, illegal mobile connections.

Notable Adoption and Results

With more than 5 million installs since its inception, the software has already been used to disable more than 3.7 million missing mobile phones. Furthermore, over 30 million fraudulent connections have also been disconnected through its use.

The government asserts that the app aids in preventing cyberthreats and assists in the locating and disabling of lost or stolen phones, thereby helping police in tracing devices and preventing cloned devices out of the black market.