The Indian government Orders Smartphone Makers to Preload Devices with State-Owned Cybersecurity App
In a major move, India's telecoms ministry has confidentially directed smartphone makers to include all new phones with a national cybersecurity tool that cannot be deleted. This mandate, which was revealed, is expected to alarm leading tech firms like Apple and raise questions among digital rights groups.
A Worldwide Pattern in Cybersecurity Regulation
Addressing a rising tide of digital scams and phone theft, India is joining governments internationally. This move echoes similar rules enacted in nations like Russia, which seek to curb the use of lost phones for illicit activities and push state-backed tools.
What Companies Are Bound by the Directive?
The recent directive applies to leading mobile phone makers operating in the Indian market. These include Apple, a company that has previously locked horns with regulators over comparable apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.
Specifics of the Government Mandate
An order dated 28 November provides phone manufacturers a 90-day deadline to ensure that the official "Messenger Friend" app is factory-loaded on all new mobile phones. A notable condition is that owners are prevented from deleting the software.
For devices currently in the supply chain, manufacturers are directed to push the app via software updates. It is notable that this directive was sent confidentially and was sent in confidence to select companies.
User Consent Concerns Raised
However, legal specialists have expressed serious worries regarding this decision. A legal expert specialising in technology law stated that India's action is a worrying development.
“The government in essence removes user consent as a meaningful choice,” said Mishi Choudhary, an expert working on internet advocacy matters.
Consumer organisations had earlier condemned a similar mandate by Russia in August for a government-sponsored communication app to be pre-installed on phones.
The Scale of the Indian Market
India, one of the world's biggest telephone markets, boasts more than 1.2 billion mobile users. Government figures indicate that the cybersecurity app, launched in January, has already assisted in tracking down more than 700,000 lost phones, with approximately 50,000 found in October by itself.
The authorities argues that the tool is crucial to fight the “serious endangerment” of telecom cybersecurity from cloned or tampered IMEI numbers, which enable scams and system abuse.
Apple's Position
Apple's iOS powers an estimated 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per market research. While Apple includes its own proprietary apps on its devices, its internal guidelines reportedly prohibit the inclusion of any third-party application before the sale of a smartphone.
“Apple has historically refused such requests from governments,” said Tarun Pathak, a research director at Counterpoint.
“It’s likely to pursue a middle ground: instead of a mandatory inclusion, they might negotiate and ask for an alternative to nudge users towards downloading the application.”
Queries for comment from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecoms department also did not respond.
The Role of the IMEI and the Application's Function
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each mobile device. It is primarily used by networks to block cellular access for phones reported as lost.
The Sanchar Saathi app is mainly intended to enable users block and track lost or stolen smartphones across all telecom networks, using a central database. It also lets them to identify, and disconnect, unauthorised mobile connections.
Notable Usage and Outcomes
With more than 5 million downloads since its inception, the software has reportedly helped block over 3.7 million missing mobile phones. Furthermore, more than 30 million fraudulent connections have also been terminated through its use.
The government asserts that the software helps preventing digital threats and assists in the locating and blocking of missing phones, thereby aiding police in tracing handsets and keeping cloned devices out of the black market.