India Orders Phone Producers to Preload Devices with National Cyber Safety Application

In a notable decision, India's telecommunications authority has privately instructed smartphone makers to preload all new phones with a state-owned cybersecurity tool that is non-removable. This directive, which has come to light, is set to antagonise leading technology firms like Apple and prompt concerns among consumer watchdogs.

An International Trend in Cybersecurity Regulation

Addressing a rising tide of digital scams and phone theft, India is joining regulators across the globe. This move mirrors comparable regulations introduced in countries like Russia, which are designed to curb the use of lost phones for illicit activities and promote state-backed applications.

Which Manufacturers Are Impacted by the Order?

The new mandate applies to major smartphone companies active in the Indian market. Among them are Apple, which has in the past locked horns with the telecom authority over comparable apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Details of the Official Mandate

An order dated 28 November allots smartphone manufacturers a three-month period to ensure that the government's "Messenger Friend" app is pre-installed on all new handsets. A critical stipulation is that owners will not be able to remove the software.

For phones already in the distribution network, companies are directed to send the application via system patches. It is worth mentioning that this order was privately circulated and was sent in confidence to select companies.

User Consent Apprehensions Voiced

However, technology experts have expressed significant concerns regarding this decision. A lawyer specialising in tech issues said that India's directive is a worrying development.

“The government practically removes user consent as a real choice,” said Mishi Choudhary, an expert working on internet advocacy matters.

Consumer organisations had also criticised a comparable requirement by Russia in August for a state-backed messenger called Max to be included on phones.

The Size of the Indian Smartphone Landscape

India, one of the world's biggest telephone markets, boasts more than 1.2 billion mobile users. Government figures indicate that the Sanchar Saathi application, introduced in January, has reportedly helped locating more than 700,000 stolen phones, with an estimated 50,000 found in October alone.

The government states that the software is essential to fight the “grave endangerment” of mobile network cybersecurity from duplicate or spoofed IMEI numbers, which enable illicit activities and network misuse.

Apple's Position

Apple's iOS runs on an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per market research. While Apple includes its own first-party applications on its devices, its company rules are said to prohibit the installation of any government app before the sale of a smartphone.

“Apple has traditionally declined such demands from authorities,” said Tarun Pathak, a analyst at Counterpoint.

“It’s probable to pursue a negotiated solution: rather than a compulsory inclusion, they might negotiate and propose an option to prompt users towards installing the application.”

Requests for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications department also remained silent.

Understanding the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each mobile device. It is most commonly used by operators to disable network access for phones reported as stolen.

The government app is mainly intended to enable users block and locate lost or stolen smartphones across all telecom networks, using a national database. It also allows them to identify, and block, illegal mobile connections.

Impressive Adoption and Outcomes

With more than 5 million installs since its release, the software has reportedly helped block more than 3.7 million missing mobile phones. Additionally, over 30 million fraudulent connections have also been disconnected through its use.

The authorities states that the tool helps combating digital threats and helps in the locating and blocking of missing phones, thereby helping police in recovering devices and preventing counterfeits out of the illicit trade.