🔗 Share this article

In a significant step, India's telecoms authority has confidentially directed smartphone makers to pre-install all new devices with a state-owned cybersecurity app that is non-removable. This mandate, which has come to light, is expected to concern leading tech companies like Apple and prompt questions among digital rights groups.

A Global Shift in Cybersecurity Regulation

To combat a recent surge of cybercrime and device misuse, The Indian authorities is joining governments worldwide. This move mirrors recent regulations enacted in countries like Russia, which aim to prevent the use of lost phones for scams and promote government-developed tools.

Which Companies Are Affected by the Directive?

The recent mandate binds key smartphone companies operating in the domestic market. These include Apple, which has in the past had disagreements with the telecom authority over comparable applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Government Mandate

An directive dated 28 November provides smartphone manufacturers a 90-day deadline to ensure that the official "Messenger Friend" app is pre-installed on all new mobile phones. A notable provision is that owners are prevented from deleting the application.

For phones currently in the distribution network, makers are required to send the application via system patches. It is important that this directive was sent confidentially and was dispatched privately to select manufacturers.

Privacy Concerns Expressed

However, legal analysts have raised significant concerns regarding this decision. A lawyer specialising in tech issues said that India's step is a reason to worry.

“The government effectively erodes user consent as a genuine choice,” said Mishi Choudhary, an expert working on digital rights issues.

Consumer organisations had also criticised a similar requirement by Russia in August for a government-sponsored communication app to be included on phones.

The Size of the Indian Smartphone Landscape

India, one of the world's largest mobile markets, boasts over 1.2 billion subscribers. Official statistics show that the cybersecurity app, launched in January, has already assisted in locating over 700,000 lost phones, with an estimated 50,000 found in October by itself.

The authorities argues that the software is vital to combat the “significant endangerment” of telecom cybersecurity from cloned or tampered IMEI numbers, which facilitate illicit activities and network abuse.

The Tech Giant's Stance

Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the rest using Android, according to market research. While Apple pre-installs its own first-party apps on its devices, its company policies are said to ban the inclusion of any government application before the sale of a smartphone.

“Apple has in the past refused these kinds of demands from governments,” noted Tarun Pathak, a research director at Counterpoint.

“It’s probable to aim for a compromise: rather than a mandatory inclusion, they might discuss and propose an alternative to encourage users towards installing the app.”

Queries for comment from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecommunications ministry also offered no comment.

The Role of the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is primarily used by networks to disable network access for phones flagged as lost.

The government app is chiefly designed to help users track and locate lost or stolen smartphones across all mobile carriers, using a national database. It also lets them to identify, and block, illegal mobile connections.

Impressive Usage and Outcomes

With over 5 million downloads since its launch, the software has already helped disable over 3.7 million stolen or lost mobile phones. Additionally, over 30 million illegal connections have also been disconnected through its use.

The government asserts that the tool helps combating cyberthreats and assists in the locating and blocking of missing phones, thereby helping police in recovering devices and keeping counterfeits out of the black market.