🔗 Share this article

In a major decision, India's telecommunications authority has confidentially instructed mobile phone companies to include all new phones with a state-owned cybersecurity tool that is non-removable. This order, which has been disclosed, is likely to concern leading technology companies like Apple and prompt questions among privacy advocates.

A Worldwide Shift in Cybersecurity Regulation

In tackling a rising tide of digital scams and hacking, India is following authorities across the globe. This step echoes recent measures framed in countries like Russia, which aim to curb the use of stolen phones for fraud and push state-backed service apps.

What Manufacturers Are Impacted by the Directive?

The latest mandate binds key mobile phone companies active in the Indian market. Among them are Apple, a company that has previously clashed with the telecom authority over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Official Mandate

An order dated 28 November gives smartphone manufacturers a 90-day period to guarantee that the government's Sanchar Saathi app is included on all new handsets. A key provision is that consumers cannot disable the application.

For phones currently in the supply chain, manufacturers are required to push the app via software updates. It is important that this order was not made public and was sent in confidence to select firms.

User Consent Worries Raised

However, technology specialists have flagged major apprehensions regarding this move. A legal expert specialising in tech law said that India's step is a worrying development.

“The government practically eliminates user consent as a meaningful choice,” commented Mishi Choudhary, an expert working on internet advocacy matters.

Privacy advocates had previously questioned a comparable mandate by Russia in August for a state-backed communication app to be included on phones.

The Size of the Indian Market

India, among the world's largest mobile markets, boasts more than 1.2 billion mobile users. Government figures reveal that the cybersecurity application, introduced in January, has reportedly helped locating more than 700,000 stolen phones, with approximately 50,000 recovered in October by itself.

The authorities states that the tool is vital to fight the “grave endangerment” of telecom cybersecurity from cloned or tampered IMEI numbers, which facilitate illicit activities and system misuse.

The Tech Giant's Position

Apple's iOS runs on an estimated 4.5% of the 735 million mobile phones in India, with the rest using Android, according to market research. While Apple includes its own first-party apps on its devices, its internal guidelines reportedly prohibit the inclusion of any government app before the sale of a device.

“Apple has historically declined these kinds of demands from governments,” noted Tarun Pathak, a research director at Counterpoint.

“It’s probable to aim for a negotiated solution: rather than a compulsory inclusion, they might negotiate and propose an alternative to prompt users towards installing the application.”

Queries for response from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecommunications department also offered no comment.

The Role of the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is most commonly used by networks to block cellular access for phones reported as lost.

The Sanchar Saathi application is primarily intended to help users block and locate missing phones across all telecom networks, using a central registry. It also enables them to spot, and disconnect, unauthorised mobile connections.

Impressive Adoption and Outcomes

With over 5 million downloads since its inception, the software has reportedly been used to block more than 3.7 million stolen or lost mobile phones. Furthermore, more than 30 million fraudulent connections have also been terminated through its use.

The government asserts that the app aids in combating cyberthreats and assists in the tracking and disabling of missing phones, thereby aiding police in recovering devices and keeping counterfeits out of the illicit trade.