🔗 Share this article

In a significant move, India's telecommunications ministry has privately instructed smartphone makers to preload all new handsets with a state-owned cybersecurity application that must remain installed. This mandate, which has come to light, is set to alarm major technology companies like Apple and prompt questions among digital rights groups.

An International Trend in Cybersecurity Policy

To combat a rising tide of online fraud and device misuse, The Indian authorities is aligning with authorities across the globe. This move mirrors similar measures enacted in nations like Russia, which are designed to block the use of stolen phones for illicit activities and promote state-backed tools.

Which Companies Are Affected by the Order?

The recent order affects key mobile phone companies operating in the Indian market. These include Apple, which has previously had disagreements with the telecom authority over comparable apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Official Mandate

An directive dated 28 November gives smartphone companies a three-month period to guarantee that the government's "Messenger Friend" app is included on all new devices. A critical provision is that consumers cannot disable the application.

For devices already in the distribution network, companies are directed to send the app via software updates. It is notable that this directive was privately circulated and was dispatched in confidence to select manufacturers.

Digital Rights Apprehensions Expressed

However, technology analysts have expressed major worries regarding this move. A legal expert specialising in technology law stated that India's step is a worrying development.

“The government in essence erodes user consent as a genuine choice,” said Mishi Choudhary, an advocate working on internet advocacy issues.

Privacy advocates had previously condemned a similar mandate by Russia in August for a government-sponsored messenger called Max to be included on phones.

The Scale of the Domestic Smartphone Landscape

India, one of the world's biggest mobile markets, boasts more than 1.2 billion mobile users. Government statistics reveal that the Sanchar Saathi application, introduced in January, has reportedly helped recovering more than 700,000 lost phones, with around 50,000 recovered in October by itself.

The government contends that the software is vital to fight the “grave endangerment” of mobile network cybersecurity from duplicate or spoofed IMEI numbers, which are used for scams and network abuse.

The Tech Giant's Position

Apple's iOS powers an estimated 4.5% of the 735 million smartphones in India, with the vast majority using Android, according to industry analysis. While Apple includes its own first-party apps on its devices, its internal policies are said to forbid the installation of any third-party app before the purchase of a smartphone.

“Apple has traditionally resisted such demands from authorities,” commented Tarun Pathak, a analyst at Counterpoint.

“It’s likely to pursue a compromise: instead of a mandatory inclusion, they might negotiate and propose an option to prompt users towards downloading the application.”

Requests for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecommunications department also offered no comment.

The Role of the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each mobile device. It is typically used by carriers to block cellular access for phones reported as lost.

The government app is mainly created to help users track and locate missing phones across all telecom networks, using a national registry. It also allows them to identify, and disconnect, illegal mobile connections.

Notable Usage and Outcomes

With over 5 million installs since its release, the software has reportedly been used to disable over 3.7 million missing mobile phones. Furthermore, more than 30 million illegal connections have also been disconnected through its use.

The authorities states that the software aids in preventing cyberthreats and helps in the tracking and disabling of missing phones, thereby helping police in tracing devices and preventing cloned devices out of the black market.