🔗 Share this article

In a significant step, India's telecoms authority has confidentially asked smartphone manufacturers to preload all new devices with a government-backed cybersecurity tool that is non-removable. This order, which was revealed, is expected to alarm major tech companies like Apple and raise questions among consumer watchdogs.

A Worldwide Pattern in Cybersecurity Regulation

Addressing a recent surge of online fraud and hacking, The Indian authorities is joining regulators internationally. This step parallels recent regulations introduced in countries like Russia, which are designed to curb the use of stolen phones for scams and push government-developed applications.

Which Manufacturers Are Bound by the Order?

The latest directive affects leading smartphone companies operating in the Indian market. This encompasses Apple, a company that has previously locked horns with the telecom authority over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Official Mandate

An directive dated 28 November allots phone manufacturers a 90-day period to ensure that the government's "Messenger Friend" application is pre-installed on all new devices. A critical provision is that owners will not be able to remove the software.

For devices currently in the supply chain, manufacturers are directed to deliver the application via software updates. It is notable that this directive was not made public and was dispatched privately to specific manufacturers.

User Consent Apprehensions Raised

However, legal experts have flagged major worries regarding this move. A lawyer focusing in technology law said that India's action is a reason to worry.

“The government effectively removes user consent as a meaningful choice,” said Mishi Choudhary, an advocate working on digital rights matters.

Privacy advocates had previously condemned a similar mandate by Russia in August for a state-backed messenger app to be included on phones.

The Size of the Domestic Market

India, one of the world's biggest mobile markets, boasts over 1.2 billion mobile users. Official statistics reveal that the cybersecurity application, launched in January, has reportedly helped recovering over 700,000 lost phones, with approximately 50,000 recovered in October alone.

The authorities contends that the app is essential to combat the “significant endangerment” of mobile network cybersecurity from duplicate or spoofed IMEI numbers, which facilitate fraud and network misuse.

The Tech Giant's Position

Apple's iOS runs on an estimated 4.5% of the 735 million smartphones in India, with the rest using Android, as per market research. While Apple pre-installs its own first-party apps on its devices, its company guidelines reportedly prohibit the inclusion of any government application before the purchase of a smartphone.

“Apple has historically declined such demands from authorities,” commented Tarun Pathak, a research director at Counterpoint.

“It’s expected to aim for a middle ground: rather than a mandatory pre-install, they might discuss and ask for an option to encourage users towards installing the application.”

Queries for comment from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications ministry also offered no comment.

The Role of the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is typically used by networks to cut off network access for phones flagged as lost.

The Sanchar Saathi app is mainly designed to enable users track and locate missing phones across all telecom networks, using a national registry. It also lets them to detect, and terminate, unauthorised mobile connections.

Notable Usage and Outcomes

With over 5 million downloads since its launch, the software has already been used to disable more than 3.7 million stolen or lost mobile phones. Moreover, over 30 million illegal connections have also been blocked through its use.

The authorities asserts that the app helps combating cyberthreats and assists in the locating and disabling of missing phones, thereby aiding police in tracing devices and preventing counterfeits out of the illicit trade.