The Indian government Mandates Smartphone Manufacturers to Pre-install Handsets with Government-Backed Cybersecurity App
In a notable decision, India's telecommunications ministry has confidentially instructed smartphone manufacturers to pre-install all new devices with a government-backed cybersecurity tool that is non-removable. This mandate, which has come to light, is set to antagonise leading tech companies like Apple and prompt questions among privacy advocates.
An International Pattern in Cybersecurity Regulation
In tackling a recent surge of online fraud and hacking, India is joining authorities worldwide. This action echoes recent measures introduced in countries like Russia, which are designed to prevent the use of stolen phones for scams and push official tools.
Which Manufacturers Are Bound by the Directive?
The latest order applies to leading smartphone makers active in the Indian market. These include Apple, a company that has in the past locked horns with regulators over comparable apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
Details of the Government Order
An directive dated 28 November provides phone companies a 90-day window to ensure that the government's Sanchar Saathi app is pre-installed on all new mobile phones. A critical stipulation is that users cannot disable the app.
For phones already in the retail pipeline, companies are instructed to push the app via software updates. It is worth mentioning that this order was not made public and was sent selectively to select manufacturers.
Digital Rights Apprehensions Raised
However, legal specialists have raised serious worries regarding this policy. A legal expert specialising in technology issues commented that India's directive is a reason to worry.
“The government practically eliminates user consent as a real choice,” commented Mishi Choudhary, an advocate working on internet advocacy issues.
Consumer organisations had earlier questioned a similar mandate by Russia in August for a state-backed communication called Max to be included on phones.
The Scope of the Indian Market
India, among the world's largest telephone markets, boasts more than 1.2 billion subscribers. Official data reveal that the Sanchar Saathi app, launched in January, has reportedly assisted in locating more than 700,000 lost phones, with around 50,000 recovered in October alone.
The authorities argues that the app is crucial to combat the “grave endangerment” of telecom cybersecurity from cloned or tampered IMEI numbers, which are used for scams and network misuse.
Apple's Likely Response
Apple's iOS runs on an approximate 4.5% of the 735 million mobile phones in India, with the rest using Android, according to market research. While Apple pre-installs its own first-party apps on its devices, its company policies reportedly ban the installation of any government application before the sale of a device.
“Apple has in the past resisted such mandates from authorities,” noted Tarun Pathak, a research director at Counterpoint.
“It’s likely to aim for a compromise: instead of a mandatory pre-install, they might negotiate and ask for an alternative to prompt users towards installing the app.”
Queries for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecoms ministry also did not respond.
Understanding the IMEI and the Application's Purpose
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each handset. It is primarily used by networks to block network access for phones reported as stolen.
The government app is chiefly created to enable users block and track lost or stolen phones across all mobile carriers, using a national registry. It also allows them to detect, and disconnect, illegal mobile connections.
Notable Adoption and Outcomes
With over 5 million downloads since its inception, the software has already been used to block more than 3.7 million missing mobile phones. Moreover, more than 30 million fraudulent connections have also been terminated through its use.
The government claims that the app helps combating cyberthreats and assists in the tracking and blocking of lost or stolen phones, thereby helping police in recovering devices and preventing cloned devices out of the illicit trade.