In a significant step, India's telecoms ministry has confidentially instructed smartphone makers to preload all new phones with a government-backed cybersecurity app that must remain installed. This order, which has been disclosed, is set to concern major tech companies like Apple and raise questions among privacy advocates.
In tackling a growing wave of online fraud and hacking, India is joining authorities across the globe. This move parallels comparable rules framed in countries like Russia, which seek to block the use of stolen phones for fraud and promote official applications.
The recent directive affects leading mobile phone makers operating in the Indian market. This encompasses Apple, which has previously clashed with the telecom authority over comparable applications, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.
An order dated 28 November gives phone manufacturers a three-month deadline to guarantee that the official Sanchar Saathi application is factory-loaded on all new mobile phones. A key stipulation is that owners cannot disable the application.
For handsets currently in the distribution network, manufacturers are instructed to deliver the app via software upgrades. It is worth mentioning that this order was not made public and was dispatched selectively to select manufacturers.
However, technology analysts have flagged significant concerns regarding this move. A legal expert focusing in tech matters commented that India's directive is a reason to worry.
“The government in essence eliminates user consent as a genuine choice,” commented Mishi Choudhary, an advocate working on internet advocacy matters.
Consumer organisations had previously questioned a similar requirement by Russia in August for a state-backed messenger app to be pre-installed on phones.
India, among the world's biggest telephone markets, boasts over 1.2 billion subscribers. Official statistics indicate that the Sanchar Saathi application, launched in January, has already helped recovering over 700,000 lost phones, with approximately 50,000 recovered in October alone.
The authorities argues that the app is crucial to combat the “serious endangerment” of telecom cybersecurity from fake or tampered IMEI numbers, which facilitate scams and network abuse.
Apple's iOS powers an approximate 4.5% of the 735 million smartphones in India, with the vast majority using Android, as per market research. While Apple pre-installs its own proprietary apps on its devices, its internal policies are said to ban the inclusion of any third-party app before the purchase of a device.
“Apple has historically resisted such demands from authorities,” commented Tarun Pathak, a research director at Counterpoint.
“It’s likely to seek a negotiated solution: rather than a compulsory inclusion, they might negotiate and propose an alternative to encourage users towards installing the app.”
Requests for response from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecommunications ministry also remained silent.
The IMEI, or International Mobile Equipment Identity, is a unique identification number unique to each mobile device. It is most commonly used by operators to disable network access for phones reported as lost.
The government app is mainly designed to help users track and locate missing phones across all telecom networks, using a central database. It also lets them to identify, and disconnect, fraudulent mobile connections.
With over 5 million downloads since its inception, the app has already helped disable over 3.7 million stolen or lost mobile phones. Furthermore, over 30 million fraudulent connections have also been terminated through its use.
The authorities claims that the software helps combating digital threats and assists in the tracking and blocking of lost or stolen phones, thereby helping police in tracing devices and preventing counterfeits out of the illicit trade.