In a notable move, India's telecoms authority has confidentially instructed smartphone manufacturers to include all new devices with a state-owned cybersecurity application that must remain installed. This mandate, which has come to light, is likely to concern major technology firms like Apple and raise questions among digital rights groups.
In tackling a rising tide of cybercrime and device misuse, India is joining authorities internationally. This action parallels recent regulations introduced in nations like Russia, which seek to curb the use of stolen phones for fraud and promote state-backed tools.
The latest directive binds key smartphone makers active in the domestic market. This encompasses Apple, which has previously had disagreements with the telecom authority over comparable apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.
An directive dated 28 November gives smartphone companies a 90-day period to ensure that the government's Sanchar Saathi app is pre-installed on all new devices. A notable stipulation is that owners will not be able to remove the app.
For phones currently in the retail pipeline, makers are required to send the app via software upgrades. It is important that this order was privately circulated and was sent privately to select firms.
However, technology analysts have expressed serious concerns regarding this policy. A legal expert focusing in tech issues said that India's directive is a reason to worry.
“The government practically removes user consent as a genuine choice,” commented Mishi Choudhary, an advocate working on internet advocacy matters.
Privacy advocates had previously criticised a comparable requirement by Russia in August for a government-sponsored messenger called Max to be pre-installed on phones.
India, one of the world's largest mobile markets, boasts more than 1.2 billion mobile users. Government figures reveal that the cybersecurity app, introduced in January, has reportedly assisted in recovering over 700,000 lost phones, with an estimated 50,000 recovered in October by itself.
The authorities contends that the software is crucial to combat the “significant endangerment” of mobile network cybersecurity from cloned or tampered IMEI numbers, which facilitate fraud and network abuse.
Apple's iOS powers an approximate 4.5% of the 735 million smartphones in India, with the rest using Android, according to market research. While Apple pre-installs its own proprietary applications on its devices, its company guidelines are said to prohibit the installation of any third-party app before the purchase of a smartphone.
“Apple has historically declined such demands from governments,” said Tarun Pathak, a analyst at Counterpoint.
“It’s likely to seek a compromise: rather than a forced inclusion, they might discuss and propose an option to encourage users towards installing the app.”
Queries for response from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecoms department also did not respond.
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each handset. It is primarily used by carriers to block cellular access for phones reported as lost.
The Sanchar Saathi app is chiefly designed to enable users track and locate missing smartphones across all mobile carriers, using a national database. It also enables them to detect, and block, fraudulent mobile connections.
With more than 5 million downloads since its launch, the app has reportedly helped block more than 3.7 million missing mobile phones. Furthermore, more than 30 million illegal connections have also been blocked through its use.
The authorities states that the app aids in preventing digital threats and helps in the tracking and blocking of lost or stolen phones, thereby helping police in tracing handsets and keeping cloned devices out of the black market.
