India Mandates Mobile Producers to Preload Devices with Government-Backed Cybersecurity Application

In a significant decision, India's telecoms ministry has confidentially instructed smartphone manufacturers to pre-install all new devices with a state-owned cybersecurity application that cannot be deleted. This mandate, which has been disclosed, is expected to concern leading tech companies like Apple and raise questions among consumer watchdogs.

A Global Pattern in Cybersecurity Regulation

In tackling a recent surge of cybercrime and hacking, India is aligning with regulators internationally. This action parallels comparable regulations introduced in countries like Russia, which aim to curb the use of lost phones for fraud and promote government-developed applications.

What Manufacturers Are Affected by the Order?

The recent directive binds leading mobile phone brands active in the domestic market. Among them are Apple, a company that has in the past had disagreements with the telecom authority over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Official Mandate

An order dated 28 November gives phone manufacturers a 90-day deadline to ensure that the official "Messenger Friend" app is included on all new devices. A notable stipulation is that owners are prevented from deleting the software.

For devices already in the retail pipeline, companies are required to deliver the app via system patches. It is worth mentioning that this order was sent confidentially and was dispatched selectively to specific manufacturers.

User Consent Apprehensions Raised

However, technology experts have raised significant concerns regarding this policy. A legal expert specialising in tech law commented that India's step is a reason to worry.

“The government in essence erodes user consent as a real choice,” commented Mishi Choudhary, an expert working on internet advocacy issues.

Privacy advocates had previously questioned a comparable requirement by Russia in August for a government-sponsored communication called Max to be included on phones.

The Scope of the Indian Market

India, one of the world's biggest mobile markets, boasts over 1.2 billion mobile users. Government data show that the cybersecurity application, launched in January, has already assisted in tracking down over 700,000 lost phones, with an estimated 50,000 found in October by itself.

The government argues that the software is essential to fight the “grave endangerment” of mobile network cybersecurity from duplicate or tampered IMEI numbers, which enable scams and network misuse.

The Tech Giant's Likely Response

Apple's iOS powers an estimated 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per industry analysis. While Apple pre-installs its own first-party apps on its devices, its internal policies are said to ban the inclusion of any third-party app before the sale of a smartphone.

“Apple has historically resisted such requests from governments,” noted Tarun Pathak, a research director at Counterpoint.

“It’s likely to seek a middle ground: instead of a mandatory pre-install, they might negotiate and propose an option to encourage users towards installing the app.”

Requests for response from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecoms ministry also offered no comment.

The Role of the IMEI and the Application's Function

The IMEI, or International Mobile Equipment Identity, is a unique identification number unique to each handset. It is typically used by carriers to block cellular access for phones flagged as lost.

The Sanchar Saathi app is chiefly designed to enable users track and locate missing smartphones across all mobile carriers, using a national database. It also allows them to detect, and block, illegal mobile connections.

Notable Adoption and Results

With more than 5 million downloads since its release, the software has already been used to disable over 3.7 million missing mobile phones. Moreover, more than 30 million illegal connections have also been blocked through its use.

The government asserts that the software aids in preventing cyberthreats and assists in the tracking and blocking of lost or stolen phones, thereby helping police in recovering devices and preventing cloned devices out of the black market.