India Directs Phone Producers to Pre-install Handsets with Government-Backed Cybersecurity Application
In a notable step, India's telecommunications authority has discreetly directed smartphone manufacturers to preload all new devices with a national cybersecurity application that cannot be deleted. This mandate, which has come to light, is expected to concern major technology companies like Apple and prompt concerns among privacy advocates.
A Global Shift in Cybersecurity Policy
To combat a recent surge of online fraud and device misuse, India is following regulators worldwide. This step mirrors comparable measures enacted in nations like Russia, which seek to prevent the use of stolen phones for illicit activities and promote state-backed applications.
Which Companies Are Bound by the Directive?
The latest directive binds leading mobile phone brands active in the domestic market. These include Apple, which has previously clashed with the telecom authority over similar apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
The Fine Print of the Government Mandate
An order dated 28 November allots smartphone companies a 90-day window to ensure that the official Sanchar Saathi application is factory-loaded on all new handsets. A key condition is that users cannot disable the application.
For phones currently in the supply chain, companies are instructed to push the application via system upgrades. It is worth mentioning that this directive was not made public and was dispatched in confidence to chosen manufacturers.
Privacy Worries Expressed
However, legal specialists have raised serious apprehensions regarding this move. A legal expert focusing in tech law stated that India's action is a reason to worry.
“The government practically erodes user consent as a meaningful choice,” commented Mishi Choudhary, an advocate working on internet rights issues.
Digital rights groups had also condemned a similar mandate by Russia in August for a state-backed communication app to be pre-installed on phones.
The Size of the Indian Market
India, one of the world's largest mobile markets, boasts more than 1.2 billion mobile users. Official statistics indicate that the cybersecurity app, launched in January, has reportedly helped recovering over 700,000 lost phones, with around 50,000 recovered in October alone.
The government contends that the tool is essential to combat the “grave endangerment” of mobile network cybersecurity from fake or tampered IMEI numbers, which are used for illicit activities and network misuse.
Apple's Likely Response
Apple's iOS runs on an estimated 4.5% of the 735 million mobile phones in India, with the rest using Android, according to market research. While Apple includes its own first-party applications on its devices, its internal guidelines reportedly prohibit the inclusion of any third-party application before the sale of a device.
“Apple has traditionally refused these kinds of requests from governments,” noted Tarun Pathak, a analyst at Counterpoint.
“It’s expected to aim for a negotiated solution: instead of a compulsory pre-install, they might discuss and ask for an alternative to encourage users towards downloading the application.”
Requests for comment from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications department also did not respond.
The Role of the IMEI and the App's Purpose
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each handset. It is typically used by networks to block network access for phones flagged as lost.
The government application is mainly created to help users track and locate lost or stolen phones across all telecom networks, using a central registry. It also lets them to identify, and block, unauthorised mobile connections.
Notable Usage and Results
With over 5 million installs since its launch, the software has already been used to disable more than 3.7 million missing mobile phones. Furthermore, more than 30 million fraudulent connections have also been blocked through its use.
The authorities asserts that the tool helps combating cyberthreats and assists in the locating and blocking of lost or stolen phones, thereby helping police in tracing handsets and keeping cloned devices out of the illicit trade.