🔗 Share this article

In a notable decision, India's telecommunications ministry has privately instructed smartphone companies to pre-install all new devices with a government-backed cybersecurity app that cannot be deleted. This mandate, which was revealed, is set to concern major technology firms like Apple and prompt questions among privacy advocates.

An International Pattern in Cybersecurity Regulation

In tackling a rising tide of online fraud and hacking, India is following regulators across the globe. This action parallels recent rules enacted in countries like Russia, which are designed to curb the use of stolen phones for fraud and encourage official applications.

What Companies Are Bound by the Order?

The recent order applies to key smartphone companies operating in the Indian market. This encompasses Apple, which has previously clashed with the telecom authority over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Official Mandate

An order dated 28 November gives phone companies a three-month deadline to guarantee that the official Sanchar Saathi app is factory-loaded on all new mobile phones. A key provision is that owners are prevented from deleting the software.

For handsets currently in the retail pipeline, manufacturers are required to push the application via software upgrades. It is important that this order was not made public and was sent in confidence to chosen firms.

Privacy Apprehensions Voiced

However, technology specialists have flagged significant concerns regarding this policy. A lawyer specialising in technology matters stated that India's action is a reason to worry.

“The government effectively erodes user consent as a meaningful choice,” stated Mishi Choudhary, an expert working on internet advocacy issues.

Digital rights groups had also criticised a similar mandate by Russia in August for a state-backed messenger called Max to be included on phones.

The Size of the Domestic Market

India, one of the world's biggest telephone markets, boasts more than 1.2 billion subscribers. Government figures show that the Sanchar Saathi application, launched in January, has already helped tracking down more than 700,000 stolen phones, with approximately 50,000 found in October by itself.

The authorities states that the software is vital to combat the “grave endangerment” of telecom cybersecurity from cloned or spoofed IMEI numbers, which facilitate illicit activities and network abuse.

Apple's Likely Response

Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per industry analysis. While Apple pre-installs its own proprietary apps on its devices, its company guidelines reportedly forbid the installation of any third-party application before the sale of a smartphone.

“Apple has in the past declined such requests from governments,” noted Tarun Pathak, a analyst at Counterpoint.

“It’s expected to aim for a middle ground: instead of a mandatory inclusion, they might negotiate and ask for an alternative to nudge users towards downloading the application.”

Queries for comment from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecommunications department also offered no comment.

The Role of the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each mobile device. It is most commonly used by operators to block network access for phones flagged as lost.

The government application is mainly intended to help users block and track lost or stolen phones across all telecom networks, using a central database. It also allows them to spot, and block, unauthorised mobile connections.

Notable Usage and Outcomes

With over 5 million installs since its release, the software has reportedly been used to block over 3.7 million missing mobile phones. Moreover, over 30 million fraudulent connections have also been terminated through its use.

The authorities asserts that the software aids in preventing cyberthreats and helps in the locating and disabling of missing phones, thereby aiding police in tracing handsets and preventing counterfeits out of the illicit trade.