India Mandates Phone Manufacturers to Include Handsets with State-Owned Cybersecurity Application

In a major move, India's telecommunications ministry has privately asked smartphone companies to include all new phones with a state-owned cybersecurity application that is non-removable. This mandate, which was revealed, is set to alarm major technology firms like Apple and prompt concerns among consumer watchdogs.

An International Pattern in Cybersecurity Regulation

In tackling a rising tide of online fraud and hacking, The Indian authorities is aligning with authorities internationally. This action parallels recent rules enacted in countries like Russia, which are designed to block the use of lost phones for fraud and encourage official applications.

What Manufacturers Are Impacted by the Directive?

The new order affects leading mobile phone brands active in the Indian market. Among them are Apple, which has previously clashed with regulators over similar apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

Details of the Official Order

An order dated 28 November gives phone companies a three-month period to guarantee that the government's "Messenger Friend" app is included on all new mobile phones. A critical stipulation is that owners will not be able to remove the app.

For phones already in the distribution network, companies are required to send the application via system patches. It is important that this order was sent confidentially and was sent privately to chosen manufacturers.

Privacy Worries Voiced

However, legal specialists have flagged major concerns regarding this decision. A lawyer specialising in tech matters commented that India's action is a cause for concern.

“The government practically removes user consent as a meaningful choice,” said Mishi Choudhary, an advocate working on internet advocacy matters.

Consumer organisations had previously condemned a similar mandate by Russia in August for a government-sponsored messenger app to be included on phones.

The Scale of the Domestic Market

India, among the world's largest mobile markets, boasts over 1.2 billion connections. Government statistics show that the Sanchar Saathi app, introduced in January, has already assisted in tracking down more than 700,000 stolen phones, with around 50,000 recovered in October alone.

The authorities states that the tool is crucial to tackle the “significant endangerment” of mobile network cybersecurity from cloned or spoofed IMEI numbers, which facilitate fraud and network abuse.

Apple's Likely Response

Apple's iOS runs on an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per market research. While Apple pre-installs its own proprietary applications on its devices, its company guidelines reportedly prohibit the installation of any third-party application before the sale of a device.

“Apple has historically resisted such mandates from governments,” noted Tarun Pathak, a research director at Counterpoint.

“It’s probable to seek a compromise: instead of a compulsory inclusion, they might discuss and ask for an option to encourage users towards downloading the app.”

Requests for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications department also offered no comment.

The Role of the IMEI and the Application's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each handset. It is most commonly used by operators to cut off cellular access for phones flagged as stolen.

The Sanchar Saathi app is chiefly designed to help users track and locate lost or stolen phones across all telecom networks, using a central database. It also enables them to detect, and terminate, unauthorised mobile connections.

Notable Usage and Results

With more than 5 million installs since its release, the software has already helped disable over 3.7 million stolen or lost mobile phones. Additionally, over 30 million illegal connections have also been disconnected through its use.

The authorities claims that the app helps preventing cyberthreats and assists in the locating and disabling of lost or stolen phones, thereby aiding police in recovering handsets and preventing cloned devices out of the illicit trade.