In a significant move, India's telecommunications authority has confidentially asked mobile phone companies to include all new phones with a national cybersecurity application that must remain installed. This mandate, which has come to light, is set to concern major technology firms like Apple and raise questions among digital rights groups.
Addressing a rising tide of cybercrime and hacking, The Indian authorities is joining governments internationally. This step mirrors similar rules enacted in countries like Russia, which are designed to prevent the use of lost phones for fraud and promote official service apps.
The recent directive applies to leading smartphone makers operating in the domestic market. Among them are Apple, a company that has in the past locked horns with regulators over similar apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.
An order dated 28 November gives smartphone manufacturers a three-month deadline to guarantee that the government's "Messenger Friend" application is included on all new devices. A notable condition is that users cannot disable the app.
For phones already in the supply chain, companies are directed to push the application via software patches. It is notable that this order was not made public and was dispatched privately to specific manufacturers.
However, technology analysts have flagged significant apprehensions regarding this policy. A lawyer specialising in technology matters stated that India's directive is a worrying development.
“The government in essence erodes user consent as a meaningful choice,” stated Mishi Choudhary, an expert working on digital advocacy issues.
Consumer organisations had earlier questioned a similar mandate by Russia in August for a state-backed communication called Max to be pre-installed on phones.
India, one of the world's biggest mobile markets, boasts more than 1.2 billion mobile users. Official data show that the cybersecurity app, introduced in January, has already assisted in tracking down over 700,000 lost phones, with around 50,000 recovered in October alone.
The authorities argues that the software is vital to fight the “significant endangerment” of telecom cybersecurity from duplicate or spoofed IMEI numbers, which are used for illicit activities and system misuse.
Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per market research. While Apple includes its own proprietary apps on its devices, its company policies are said to forbid the installation of any third-party application before the purchase of a smartphone.
“Apple has traditionally declined such demands from governments,” commented Tarun Pathak, a research director at Counterpoint.
“It’s probable to seek a middle ground: rather than a compulsory inclusion, they might discuss and propose an option to prompt users towards downloading the application.”
Requests for response from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecommunications department also offered no comment.
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each handset. It is primarily used by carriers to cut off cellular access for phones reported as stolen.
The Sanchar Saathi app is chiefly created to help users track and track lost or stolen phones across all mobile carriers, using a central database. It also allows them to identify, and block, unauthorised mobile connections.
With more than 5 million installs since its release, the app has reportedly helped block more than 3.7 million stolen or lost mobile phones. Moreover, over 30 million fraudulent connections have also been blocked through its use.
The authorities states that the app helps combating digital threats and assists in the locating and blocking of lost or stolen phones, thereby helping police in tracing devices and keeping counterfeits out of the black market.
Lena is a tech journalist with over a decade of experience covering consumer electronics and emerging technologies.