The Indian government Orders Smartphone Makers to Include Handsets with State-Owned Cybersecurity Application

In a major move, India's telecoms authority has discreetly instructed mobile phone companies to preload all new handsets with a government-backed cybersecurity application that cannot be deleted. This mandate, which was revealed, is likely to concern major technology companies like Apple and raise concerns among digital rights groups.

A Global Shift in Digital Security Policy

In tackling a recent surge of digital scams and phone theft, India is following authorities across the globe. This move parallels similar rules enacted in nations like Russia, which aim to block the use of lost phones for illicit activities and promote state-backed tools.

Which Manufacturers Are Bound by the Directive?

The recent mandate binds key smartphone brands operating in the Indian market. Among them are Apple, a company that has previously clashed with the telecom authority over comparable apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Official Mandate

An order dated 28 November allots phone manufacturers a 90-day deadline to guarantee that the government's Sanchar Saathi application is included on all new handsets. A notable condition is that users will not be able to remove the software.

For phones currently in the distribution network, makers are instructed to deliver the application via software patches. It is worth mentioning that this directive was not made public and was communicated privately to select manufacturers.

User Consent Concerns Voiced

However, legal experts have flagged significant worries regarding this decision. A lawyer specialising in tech law said that India's directive is a worrying development.

“The government in essence erodes user consent as a meaningful choice,” said Mishi Choudhary, an expert working on digital advocacy issues.

Digital rights groups had previously criticised a similar requirement by Russia in August for a government-sponsored communication called Max to be included on phones.

The Size of the Indian Smartphone Landscape

India, among the world's largest mobile markets, boasts more than 1.2 billion connections. Official statistics show that the cybersecurity app, introduced in January, has reportedly helped recovering over 700,000 lost phones, with an estimated 50,000 found in October by itself.

The authorities argues that the app is essential to fight the “serious endangerment” of telecom cybersecurity from cloned or spoofed IMEI numbers, which are used for scams and system abuse.

Apple's Stance

Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, according to industry analysis. While Apple includes its own proprietary apps on its devices, its company guidelines reportedly ban the installation of any government application before the purchase of a device.

“Apple has traditionally refused such mandates from governments,” commented Tarun Pathak, a analyst at Counterpoint.

“It’s likely to seek a compromise: rather than a forced pre-install, they might negotiate and ask for an alternative to prompt users towards downloading the app.”

Requests for comment from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecommunications department also remained silent.

Understanding the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a unique identification number assigned to each handset. It is primarily used by networks to cut off network access for phones flagged as stolen.

The Sanchar Saathi application is chiefly created to enable users track and locate lost or stolen phones across all mobile carriers, using a national database. It also enables them to identify, and disconnect, unauthorised mobile connections.

Notable Adoption and Outcomes

With more than 5 million downloads since its release, the software has already helped disable more than 3.7 million missing mobile phones. Moreover, more than 30 million fraudulent connections have also been disconnected through its use.

The authorities states that the tool helps preventing digital threats and assists in the locating and disabling of lost or stolen phones, thereby helping police in tracing devices and preventing cloned devices out of the illicit trade.