India Mandates Mobile Makers to Pre-install Handsets with State-Owned Cybersecurity App
In a major step, India's telecommunications department has privately directed mobile phone companies to preload all new handsets with a national cybersecurity app that must remain installed. This order, which has come to light, is likely to alarm leading tech companies like Apple and raise concerns among privacy advocates.
A Global Trend in Digital Security Regulation
Addressing a growing wave of online fraud and phone theft, India is joining regulators across the globe. This action parallels similar measures framed in countries like Russia, which are designed to block the use of lost phones for illicit activities and push state-backed applications.
Which Manufacturers Are Bound by the Directive?
The recent mandate affects key mobile phone companies active in the domestic market. This encompasses Apple, a company that has previously had disagreements with regulators over comparable apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.
Details of the Government Mandate
An directive dated 28 November gives smartphone companies a 90-day period to guarantee that the official Sanchar Saathi app is included on all new devices. A key provision is that consumers will not be able to remove the software.
For handsets currently in the supply chain, makers are instructed to send the app via software patches. It is important that this order was not made public and was communicated selectively to select companies.
User Consent Apprehensions Raised
However, legal experts have flagged serious apprehensions regarding this move. A legal expert specialising in technology issues stated that India's directive is a worrying development.
“The government practically erodes user consent as a genuine choice,” said Mishi Choudhary, an advocate working on internet rights issues.
Privacy advocates had also condemned a similar requirement by Russia in August for a government-sponsored messenger app to be included on phones.
The Scale of the Domestic Market
India, among the world's biggest telephone markets, boasts more than 1.2 billion connections. Government data indicate that the cybersecurity application, launched in January, has already helped recovering over 700,000 stolen phones, with approximately 50,000 recovered in October alone.
The authorities contends that the tool is crucial to fight the “serious endangerment” of mobile network cybersecurity from cloned or tampered IMEI numbers, which are used for illicit activities and system misuse.
The Tech Giant's Likely Response
Apple's iOS powers an estimated 4.5% of the 735 million mobile phones in India, with the vast majority using Android, according to market research. While Apple pre-installs its own first-party apps on its devices, its internal policies reportedly forbid the installation of any government application before the sale of a smartphone.
“Apple has traditionally declined these kinds of requests from authorities,” said Tarun Pathak, a analyst at Counterpoint.
“It’s likely to aim for a compromise: instead of a compulsory inclusion, they might discuss and ask for an option to nudge users towards installing the application.”
Requests for response from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecoms department also did not respond.
The Role of the IMEI and the App's Function
The IMEI, or International Mobile Equipment Identity, is a unique identification number unique to each handset. It is typically used by networks to cut off cellular access for phones reported as stolen.
The government application is chiefly intended to help users track and locate missing phones across all telecom networks, using a national registry. It also enables them to identify, and block, fraudulent mobile connections.
Impressive Adoption and Results
With over 5 million downloads since its inception, the software has reportedly helped disable over 3.7 million missing mobile phones. Furthermore, more than 30 million illegal connections have also been terminated through its use.
The government asserts that the tool aids in combating cyberthreats and assists in the locating and blocking of missing phones, thereby aiding police in recovering devices and preventing cloned devices out of the illicit trade.