The Indian government Mandates Smartphone Manufacturers to Pre-install Devices with Government-Backed Cybersecurity App

In a notable step, India's telecoms ministry has confidentially directed mobile phone manufacturers to preload all new phones with a state-owned cybersecurity tool that is non-removable. This directive, which has come to light, is likely to concern major technology companies like Apple and raise concerns among consumer watchdogs.

A Global Pattern in Cybersecurity Policy

In tackling a rising tide of digital scams and phone theft, India is aligning with authorities worldwide. This action mirrors similar regulations framed in countries like Russia, which seek to block the use of lost phones for scams and push government-developed tools.

Which Companies Are Affected by the Directive?

The new directive applies to leading smartphone brands active in the domestic market. Among them are Apple, which has in the past had disagreements with regulators over comparable applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Details of the Official Order

An order dated 28 November allots smartphone companies a three-month deadline to ensure that the official "Messenger Friend" application is included on all new devices. A critical provision is that consumers cannot disable the application.

For devices already in the distribution network, manufacturers are directed to push the application via system updates. It is notable that this directive was sent confidentially and was communicated selectively to chosen firms.

User Consent Worries Voiced

However, technology experts have raised significant apprehensions regarding this policy. A lawyer specialising in tech law stated that India's step is a cause for concern.

“The government in essence removes user consent as a genuine choice,” stated Mishi Choudhary, an expert working on internet advocacy matters.

Digital rights groups had earlier condemned a similar requirement by Russia in August for a government-sponsored messenger called Max to be pre-installed on phones.

The Scale of the Domestic Market

India, one of the world's largest telephone markets, boasts over 1.2 billion mobile users. Government statistics indicate that the cybersecurity app, introduced in January, has already helped recovering over 700,000 stolen phones, with around 50,000 found in October alone.

The government states that the software is essential to fight the “grave endangerment” of mobile network cybersecurity from duplicate or spoofed IMEI numbers, which facilitate fraud and network abuse.

Apple's Position

Apple's iOS runs on an estimated 4.5% of the 735 million mobile phones in India, with the rest using Android, as per industry analysis. While Apple includes its own first-party applications on its devices, its company rules are said to forbid the installation of any third-party application before the sale of a device.

“Apple has in the past declined such mandates from governments,” noted Tarun Pathak, a analyst at Counterpoint.

“It’s expected to pursue a negotiated solution: rather than a mandatory pre-install, they might discuss and ask for an option to nudge users towards installing the app.”

Queries for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecoms department also did not respond.

Understanding the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each handset. It is typically used by carriers to cut off network access for phones reported as stolen.

The Sanchar Saathi application is mainly created to help users block and locate missing smartphones across all mobile carriers, using a central registry. It also lets them to identify, and block, fraudulent mobile connections.

Notable Adoption and Outcomes

With over 5 million installs since its inception, the app has already helped block over 3.7 million missing mobile phones. Additionally, over 30 million fraudulent connections have also been blocked through its use.

The authorities claims that the app helps combating cyberthreats and assists in the tracking and blocking of lost or stolen phones, thereby helping police in recovering handsets and keeping counterfeits out of the illicit trade.