India Mandates Mobile Manufacturers to Include Devices with State-Owned Cybersecurity App

In a significant decision, India's telecoms department has privately instructed mobile phone manufacturers to include all new phones with a state-owned cybersecurity application that cannot be deleted. This directive, which has come to light, is likely to alarm leading tech companies like Apple and raise questions among digital rights groups.

An International Shift in Digital Security Policy

In tackling a growing wave of online fraud and device misuse, The Indian authorities is joining authorities across the globe. This step mirrors comparable rules framed in nations like Russia, which seek to curb the use of lost phones for illicit activities and promote state-backed applications.

What Manufacturers Are Affected by the Order?

The latest directive applies to major mobile phone makers operating in the Indian market. Among them are Apple, a company that has in the past had disagreements with regulators over comparable applications, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Official Order

An directive dated 28 November allots smartphone manufacturers a 90-day period to guarantee that the government's "Messenger Friend" application is included on all new handsets. A notable condition is that consumers cannot disable the software.

For handsets currently in the distribution network, manufacturers are instructed to push the app via software patches. It is worth mentioning that this order was sent confidentially and was sent privately to select firms.

User Consent Worries Expressed

However, legal specialists have expressed major worries regarding this move. A legal expert specialising in tech law said that India's action is a worrying development.

“The government in essence removes user consent as a meaningful choice,” commented Mishi Choudhary, an advocate working on digital rights matters.

Consumer organisations had previously criticised a comparable mandate by Russia in August for a government-sponsored messenger called Max to be pre-installed on phones.

The Size of the Indian Smartphone Landscape

India, one of the world's largest telephone markets, boasts over 1.2 billion mobile users. Official figures reveal that the Sanchar Saathi app, launched in January, has already assisted in locating more than 700,000 stolen phones, with around 50,000 found in October alone.

The government argues that the app is vital to combat the “significant endangerment” of telecom cybersecurity from duplicate or spoofed IMEI numbers, which enable scams and system abuse.

The Tech Giant's Stance

Apple's iOS runs on an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, according to industry analysis. While Apple pre-installs its own proprietary applications on its devices, its internal rules are said to prohibit the installation of any third-party application before the sale of a smartphone.

“Apple has historically refused such mandates from governments,” noted Tarun Pathak, a analyst at Counterpoint.

“It’s likely to pursue a middle ground: rather than a mandatory pre-install, they might negotiate and ask for an option to prompt users towards installing the application.”

Requests for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecommunications department also remained silent.

The Role of the IMEI and the Application's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each handset. It is primarily used by networks to block network access for phones reported as stolen.

The government app is primarily designed to help users track and locate missing smartphones across all mobile carriers, using a national database. It also lets them to detect, and terminate, fraudulent mobile connections.

Impressive Usage and Outcomes

With more than 5 million downloads since its release, the app has already helped disable more than 3.7 million stolen or lost mobile phones. Furthermore, more than 30 million fraudulent connections have also been terminated through its use.

The government states that the app helps preventing cyberthreats and assists in the locating and disabling of lost or stolen phones, thereby helping police in tracing devices and preventing cloned devices out of the illicit trade.

Jamie Roberts
Jamie Roberts

Maya Chen is a network security specialist with over 10 years of experience in IT infrastructure and digital transformation projects.