India Directs Smartphone Makers to Preload Handsets with State-Owned Cybersecurity App

In a significant decision, India's telecoms department has privately asked smartphone companies to preload all new devices with a national cybersecurity application that must remain installed. This order, which has been disclosed, is set to concern major technology firms like Apple and raise questions among consumer watchdogs.

A Global Trend in Cybersecurity Policy

Addressing a recent surge of cybercrime and hacking, The Indian authorities is aligning with governments across the globe. This action parallels comparable measures enacted in nations like Russia, which seek to prevent the use of lost phones for scams and promote state-backed service apps.

Which Manufacturers Are Affected by the Directive?

The recent directive affects leading mobile phone brands operating in the domestic market. These include Apple, a company that has previously clashed with regulators over comparable apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Government Order

An order dated 28 November provides smartphone manufacturers a three-month window to guarantee that the official "Messenger Friend" app is included on all new devices. A critical condition is that users will not be able to remove the application.

For devices already in the supply chain, makers are directed to push the application via software upgrades. It is important that this order was sent confidentially and was dispatched in confidence to select firms.

Privacy Concerns Voiced

However, legal experts have expressed serious concerns regarding this move. A lawyer focusing in technology law said that India's action is a worrying development.

“The government in essence eliminates user consent as a real choice,” commented Mishi Choudhary, an advocate working on digital advocacy matters.

Privacy advocates had earlier condemned a comparable requirement by Russia in August for a government-sponsored messenger called Max to be included on phones.

The Scope of the Indian Smartphone Landscape

India, one of the world's biggest mobile markets, boasts more than 1.2 billion mobile users. Government figures reveal that the Sanchar Saathi app, launched in January, has already helped recovering more than 700,000 lost phones, with an estimated 50,000 found in October by itself.

The government contends that the software is crucial to fight the “serious endangerment” of mobile network cybersecurity from cloned or spoofed IMEI numbers, which facilitate fraud and system abuse.

The Tech Giant's Likely Response

Apple's iOS runs on an approximate 4.5% of the 735 million smartphones in India, with the rest using Android, according to industry analysis. While Apple pre-installs its own first-party applications on its devices, its company guidelines are said to ban the installation of any government app before the purchase of a device.

“Apple has historically declined such mandates from governments,” noted Tarun Pathak, a analyst at Counterpoint.

“It’s likely to seek a compromise: instead of a compulsory pre-install, they might negotiate and ask for an option to nudge users towards downloading the app.”

Requests for comment from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecoms ministry also did not respond.

Understanding the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a unique identification number assigned to each mobile device. It is primarily used by networks to cut off cellular access for phones reported as lost.

The government application is chiefly intended to help users block and track missing smartphones across all telecom networks, using a central registry. It also enables them to detect, and block, unauthorised mobile connections.

Notable Adoption and Outcomes

With more than 5 million installs since its inception, the app has reportedly been used to block over 3.7 million missing mobile phones. Furthermore, over 30 million fraudulent connections have also been terminated through its use.

The government states that the software aids in preventing digital threats and assists in the locating and disabling of lost or stolen phones, thereby aiding police in recovering handsets and preventing cloned devices out of the illicit trade.

Dana Hawkins
Dana Hawkins

A cybersecurity specialist with over a decade of experience in software patching and vulnerability management.