India Orders Smartphone Manufacturers to Preload Devices with State-Owned Cybersecurity App
In a major decision, India's telecommunications ministry has confidentially directed mobile phone companies to include all new phones with a state-owned cybersecurity application that cannot be deleted. This mandate, which has come to light, is likely to concern major tech companies like Apple and raise concerns among digital rights groups.
A Worldwide Shift in Digital Security Policy
Addressing a rising tide of digital scams and hacking, The Indian authorities is aligning with authorities across the globe. This action parallels similar measures framed in countries like Russia, which aim to block the use of stolen phones for fraud and promote government-developed tools.
Which Manufacturers Are Impacted by the Directive?
The recent order binds key mobile phone makers active in the Indian market. This encompasses Apple, which has previously locked horns with the telecom authority over similar applications, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.
Specifics of the Official Mandate
An directive dated 28 November gives phone companies a 90-day window to ensure that the official Sanchar Saathi application is included on all new devices. A notable provision is that owners cannot disable the app.
For devices currently in the supply chain, companies are directed to deliver the app via system patches. It is worth mentioning that this directive was sent confidentially and was dispatched selectively to chosen manufacturers.
Privacy Concerns Expressed
However, legal analysts have raised major worries regarding this policy. A lawyer specialising in tech law said that India's step is a worrying development.
“The government in essence erodes user consent as a real choice,” said Mishi Choudhary, an advocate working on internet advocacy issues.
Consumer organisations had earlier questioned a similar mandate by Russia in August for a state-backed messenger called Max to be included on phones.
The Size of the Indian Market
India, one of the world's largest mobile markets, boasts more than 1.2 billion subscribers. Government figures reveal that the cybersecurity application, introduced in January, has reportedly helped recovering over 700,000 stolen phones, with approximately 50,000 recovered in October alone.
The authorities argues that the software is vital to tackle the “significant endangerment” of telecom cybersecurity from fake or tampered IMEI numbers, which enable scams and system abuse.
The Tech Giant's Likely Response
Apple's iOS runs on an approximate 4.5% of the 735 million smartphones in India, with the vast majority using Android, as per market research. While Apple includes its own first-party apps on its devices, its internal rules are said to prohibit the inclusion of any third-party app before the sale of a device.
“Apple has in the past declined these kinds of requests from governments,” commented Tarun Pathak, a analyst at Counterpoint.
“It’s expected to pursue a middle ground: rather than a compulsory inclusion, they might negotiate and ask for an option to nudge users towards downloading the app.”
Requests for comment from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecoms department also remained silent.
The Role of the IMEI and the App's Function
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is primarily used by operators to disable cellular access for phones reported as stolen.
The Sanchar Saathi application is primarily intended to help users block and locate missing phones across all telecom networks, using a central registry. It also allows them to identify, and disconnect, unauthorised mobile connections.
Impressive Usage and Results
With over 5 million installs since its inception, the software has already been used to disable more than 3.7 million missing mobile phones. Furthermore, over 30 million illegal connections have also been disconnected through its use.
The authorities asserts that the tool aids in preventing digital threats and assists in the locating and blocking of missing phones, thereby aiding police in recovering devices and preventing cloned devices out of the illicit trade.