India Mandates Mobile Makers to Include Handsets with National Cyber Safety App
In a notable move, India's telecommunications authority has discreetly instructed mobile phone companies to preload all new devices with a national cybersecurity app that cannot be deleted. This mandate, which has come to light, is likely to alarm leading tech firms like Apple and raise concerns among privacy advocates.
A Global Pattern in Cybersecurity Regulation
Addressing a growing wave of cybercrime and device misuse, India is aligning with regulators internationally. This action mirrors similar rules enacted in nations like Russia, which seek to prevent the use of lost phones for illicit activities and push state-backed applications.
Which Companies Are Affected by the Directive?
The recent order affects key smartphone companies active in the Indian market. This encompasses Apple, which has in the past locked horns with the telecom authority over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
Specifics of the Government Order
An order dated 28 November allots smartphone manufacturers a 90-day window to guarantee that the government's Sanchar Saathi app is included on all new devices. A notable stipulation is that consumers cannot disable the application.
For devices currently in the supply chain, makers are instructed to push the app via system updates. It is notable that this directive was privately circulated and was sent selectively to specific companies.
Privacy Concerns Voiced
However, technology specialists have raised major concerns regarding this move. A lawyer specialising in tech law commented that India's action is a worrying development.
“The government effectively erodes user consent as a genuine choice,” stated Mishi Choudhary, an expert working on digital advocacy matters.
Consumer organisations had previously questioned a comparable mandate by Russia in August for a state-backed communication called Max to be pre-installed on phones.
The Size of the Domestic Market
India, one of the world's largest telephone markets, boasts over 1.2 billion subscribers. Official statistics show that the cybersecurity app, introduced in January, has reportedly helped locating more than 700,000 lost phones, with approximately 50,000 found in October by itself.
The authorities argues that the app is crucial to tackle the “significant endangerment” of mobile network cybersecurity from duplicate or tampered IMEI numbers, which facilitate fraud and system abuse.
The Tech Giant's Stance
Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per industry analysis. While Apple pre-installs its own first-party apps on its devices, its company policies are said to forbid the installation of any third-party application before the purchase of a device.
“Apple has historically resisted such demands from authorities,” noted Tarun Pathak, a research director at Counterpoint.
“It’s likely to pursue a compromise: rather than a compulsory pre-install, they might negotiate and propose an option to encourage users towards installing the application.”
Requests for comment from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications department also did not respond.
Understanding the IMEI and the App's Purpose
The IMEI, or International Mobile Equipment Identity, is a unique identification number assigned to each handset. It is typically used by networks to disable cellular access for phones reported as stolen.
The government application is primarily designed to enable users block and track lost or stolen phones across all mobile carriers, using a central registry. It also lets them to detect, and block, unauthorised mobile connections.
Impressive Usage and Results
With more than 5 million installs since its inception, the software has already been used to disable more than 3.7 million missing mobile phones. Moreover, more than 30 million illegal connections have also been blocked through its use.
The authorities claims that the software helps combating digital threats and assists in the locating and disabling of missing phones, thereby helping police in tracing handsets and keeping cloned devices out of the illicit trade.