🔗 Share this article

In a major step, India's telecommunications ministry has discreetly directed smartphone makers to preload all new devices with a state-owned cybersecurity tool that cannot be deleted. This mandate, which has come to light, is likely to antagonise major tech firms like Apple and raise questions among digital rights groups.

A Global Pattern in Cybersecurity Policy

To combat a growing wave of online fraud and hacking, India is aligning with regulators across the globe. This move echoes comparable regulations framed in countries like Russia, which seek to block the use of lost phones for scams and encourage official service apps.

What Companies Are Impacted by the Order?

The recent mandate applies to major mobile phone makers active in the domestic market. Among them are Apple, which has previously had disagreements with regulators over similar apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Details of the Government Order

An order dated 28 November gives phone companies a 90-day window to guarantee that the official Sanchar Saathi application is factory-loaded on all new devices. A notable condition is that owners will not be able to remove the app.

For phones currently in the distribution network, manufacturers are directed to deliver the app via system upgrades. It is worth mentioning that this directive was sent confidentially and was communicated in confidence to specific companies.

Privacy Apprehensions Raised

However, legal specialists have flagged serious concerns regarding this decision. A legal expert specialising in technology issues stated that India's action is a cause for concern.

“The government practically eliminates user consent as a genuine choice,” said Mishi Choudhary, an expert working on digital rights matters.

Privacy advocates had earlier questioned a comparable requirement by Russia in August for a state-backed communication app to be pre-installed on phones.

The Size of the Indian Market

India, among the world's largest mobile markets, boasts over 1.2 billion mobile users. Official figures show that the cybersecurity app, launched in January, has already assisted in recovering over 700,000 lost phones, with an estimated 50,000 found in October by itself.

The authorities argues that the tool is essential to tackle the “grave endangerment” of mobile network cybersecurity from cloned or spoofed IMEI numbers, which are used for illicit activities and system misuse.

Apple's Likely Response

Apple's iOS runs on an approximate 4.5% of the 735 million smartphones in India, with the vast majority using Android, as per industry analysis. While Apple pre-installs its own first-party apps on its devices, its company rules are said to forbid the installation of any third-party application before the purchase of a smartphone.

“Apple has in the past refused these kinds of demands from governments,” said Tarun Pathak, a research director at Counterpoint.

“It’s probable to aim for a compromise: rather than a compulsory pre-install, they might negotiate and propose an option to prompt users towards installing the app.”

Queries for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecoms ministry also did not respond.

The Role of the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each mobile device. It is typically used by carriers to disable cellular access for phones reported as lost.

The government application is primarily designed to help users track and track missing phones across all mobile carriers, using a central registry. It also enables them to identify, and disconnect, illegal mobile connections.

Notable Usage and Results

With more than 5 million installs since its inception, the software has already been used to disable over 3.7 million missing mobile phones. Additionally, more than 30 million fraudulent connections have also been blocked through its use.

The authorities states that the app helps preventing cyberthreats and helps in the tracking and blocking of missing phones, thereby helping police in recovering handsets and keeping cloned devices out of the illicit trade.