India Mandates Smartphone Makers to Preload Devices with National Cybersecurity Application

In a major move, India's telecoms authority has privately asked smartphone makers to include all new phones with a state-owned cybersecurity app that must remain installed. This mandate, which has come to light, is likely to concern major tech firms like Apple and raise concerns among consumer watchdogs.

An International Trend in Cybersecurity Policy

In tackling a rising tide of online fraud and hacking, The Indian authorities is joining authorities across the globe. This step mirrors recent regulations framed in countries like Russia, which aim to curb the use of lost phones for fraud and encourage government-developed tools.

What Companies Are Impacted by the Order?

The latest order binds key smartphone companies active in the Indian market. Among them are Apple, which has previously locked horns with regulators over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Official Order

An order dated 28 November gives smartphone companies a 90-day deadline to ensure that the official "Messenger Friend" app is factory-loaded on all new devices. A key condition is that users will not be able to remove the app.

For devices currently in the retail pipeline, makers are required to send the application via software updates. It is important that this order was privately circulated and was sent in confidence to specific manufacturers.

User Consent Concerns Raised

However, legal experts have raised serious apprehensions regarding this policy. A lawyer specialising in tech matters commented that India's step is a worrying development.

“The government effectively eliminates user consent as a real choice,” stated Mishi Choudhary, an expert working on digital rights issues.

Consumer organisations had earlier condemned a similar mandate by Russia in August for a state-backed communication called Max to be included on phones.

The Size of the Domestic Market

India, among the world's biggest telephone markets, boasts over 1.2 billion subscribers. Official figures indicate that the Sanchar Saathi application, launched in January, has reportedly helped tracking down more than 700,000 lost phones, with approximately 50,000 found in October by itself.

The authorities argues that the tool is vital to tackle the “serious endangerment” of mobile network cybersecurity from duplicate or spoofed IMEI numbers, which facilitate scams and network abuse.

Apple's Likely Response

Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, according to industry analysis. While Apple includes its own first-party applications on its devices, its internal guidelines are said to ban the inclusion of any government application before the sale of a device.

“Apple has historically refused these kinds of demands from authorities,” said Tarun Pathak, a analyst at Counterpoint.

“It’s expected to aim for a middle ground: instead of a mandatory pre-install, they might discuss and ask for an alternative to prompt users towards downloading the app.”

Requests for response from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecoms department also remained silent.

Understanding the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a unique identification number unique to each handset. It is primarily used by networks to cut off cellular access for phones reported as lost.

The Sanchar Saathi application is mainly intended to help users track and track missing phones across all telecom networks, using a central database. It also allows them to detect, and terminate, fraudulent mobile connections.

Notable Adoption and Results

With more than 5 million installs since its release, the app has already been used to disable over 3.7 million stolen or lost mobile phones. Furthermore, over 30 million fraudulent connections have also been terminated through its use.

The government asserts that the software aids in combating digital threats and helps in the locating and blocking of missing phones, thereby helping police in tracing devices and preventing counterfeits out of the illicit trade.