In a significant decision, India's telecommunications department has discreetly instructed smartphone companies to preload all new devices with a government-backed cybersecurity application that is non-removable. This directive, which has come to light, is likely to alarm major technology firms like Apple and raise questions among digital rights groups.
In tackling a rising tide of digital scams and phone theft, India is following regulators internationally. This step mirrors similar rules enacted in nations like Russia, which aim to block the use of stolen phones for scams and encourage state-backed tools.
The recent order binds leading mobile phone brands operating in the domestic market. Among them are Apple, a company that has in the past had disagreements with regulators over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
An order dated 28 November provides smartphone companies a three-month period to ensure that the official Sanchar Saathi application is pre-installed on all new devices. A key stipulation is that consumers are prevented from deleting the application.
For handsets already in the distribution network, manufacturers are required to send the application via system updates. It is important that this order was privately circulated and was dispatched privately to specific manufacturers.
However, legal analysts have raised major concerns regarding this decision. A lawyer specialising in tech matters commented that India's directive is a reason to worry.
“The government practically eliminates user consent as a meaningful choice,” commented Mishi Choudhary, an advocate working on internet advocacy matters.
Digital rights groups had earlier questioned a similar mandate by Russia in August for a government-sponsored communication app to be pre-installed on phones.
India, one of the world's biggest telephone markets, boasts more than 1.2 billion connections. Government figures show that the Sanchar Saathi app, introduced in January, has already assisted in locating more than 700,000 stolen phones, with an estimated 50,000 found in October by itself.
The authorities contends that the tool is crucial to fight the “serious endangerment” of telecom cybersecurity from cloned or spoofed IMEI numbers, which are used for scams and system abuse.
Apple's iOS powers an approximate 4.5% of the 735 million smartphones in India, with the rest using Android, as per industry analysis. While Apple pre-installs its own first-party apps on its devices, its company policies are said to forbid the installation of any third-party app before the sale of a smartphone.
“Apple has in the past declined these kinds of mandates from authorities,” commented Tarun Pathak, a research director at Counterpoint.
“It’s probable to pursue a negotiated solution: instead of a compulsory pre-install, they might discuss and ask for an option to nudge users towards installing the app.”
Requests for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications ministry also did not respond.
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is most commonly used by operators to cut off network access for phones flagged as lost.
The government app is mainly created to enable users track and track missing phones across all telecom networks, using a national registry. It also lets them to identify, and disconnect, fraudulent mobile connections.
With more than 5 million downloads since its inception, the app has reportedly been used to disable over 3.7 million stolen or lost mobile phones. Furthermore, more than 30 million illegal connections have also been disconnected through its use.
The authorities claims that the tool aids in preventing digital threats and assists in the tracking and disabling of lost or stolen phones, thereby aiding police in tracing handsets and preventing cloned devices out of the black market.