🔗 Share this article

In a significant step, India's telecommunications authority has discreetly directed mobile phone manufacturers to include all new phones with a national cybersecurity tool that cannot be deleted. This order, which has come to light, is set to alarm major tech firms like Apple and prompt questions among digital rights groups.

An International Shift in Cybersecurity Policy

Addressing a rising tide of online fraud and device misuse, The Indian authorities is following regulators worldwide. This move echoes similar rules introduced in countries like Russia, which seek to curb the use of stolen phones for fraud and push official service apps.

Which Manufacturers Are Bound by the Directive?

The latest mandate affects leading smartphone companies active in the domestic market. Among them are Apple, a company that has in the past clashed with regulators over similar applications, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

Details of the Government Mandate

An directive dated 28 November allots smartphone companies a 90-day period to ensure that the government's Sanchar Saathi application is included on all new devices. A key condition is that owners will not be able to remove the software.

For devices already in the retail pipeline, manufacturers are instructed to deliver the app via system updates. It is notable that this directive was sent confidentially and was communicated selectively to chosen companies.

User Consent Worries Raised

However, technology experts have flagged major worries regarding this decision. A legal expert specialising in tech matters stated that India's action is a reason to worry.

“The government practically removes user consent as a real choice,” commented Mishi Choudhary, an advocate working on internet advocacy matters.

Digital rights groups had previously questioned a similar requirement by Russia in August for a state-backed communication called Max to be included on phones.

The Size of the Indian Smartphone Landscape

India, one of the world's largest telephone markets, boasts over 1.2 billion mobile users. Government statistics show that the Sanchar Saathi app, introduced in January, has reportedly assisted in tracking down over 700,000 stolen phones, with approximately 50,000 found in October by itself.

The authorities contends that the tool is crucial to combat the “significant endangerment” of mobile network cybersecurity from cloned or tampered IMEI numbers, which are used for illicit activities and network misuse.

The Tech Giant's Likely Response

Apple's iOS runs on an approximate 4.5% of the 735 million smartphones in India, with the rest using Android, according to market research. While Apple includes its own proprietary apps on its devices, its company rules are said to forbid the inclusion of any third-party app before the sale of a smartphone.

“Apple has traditionally resisted these kinds of mandates from authorities,” noted Tarun Pathak, a research director at Counterpoint.

“It’s expected to aim for a middle ground: rather than a compulsory inclusion, they might negotiate and propose an option to nudge users towards downloading the application.”

Queries for response from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecommunications ministry also offered no comment.

The Role of the IMEI and the Application's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each handset. It is most commonly used by carriers to disable cellular access for phones flagged as lost.

The government app is chiefly created to enable users track and locate missing phones across all mobile carriers, using a national registry. It also enables them to spot, and terminate, illegal mobile connections.

Impressive Usage and Results

With more than 5 million installs since its inception, the software has reportedly helped block over 3.7 million missing mobile phones. Moreover, over 30 million fraudulent connections have also been blocked through its use.

The authorities claims that the software helps combating cyberthreats and assists in the locating and disabling of missing phones, thereby aiding police in tracing handsets and preventing counterfeits out of the illicit trade.