India Directs Mobile Makers to Preload Devices with State-Owned Cyber Safety Application

In a major decision, India's telecoms department has confidentially asked smartphone companies to include all new devices with a government-backed cybersecurity app that must remain installed. This mandate, which was revealed, is expected to concern leading tech companies like Apple and raise questions among digital rights groups.

An International Shift in Digital Security Policy

In tackling a growing wave of online fraud and device misuse, India is following regulators internationally. This step echoes similar measures framed in nations like Russia, which are designed to curb the use of lost phones for scams and encourage official applications.

Which Manufacturers Are Bound by the Directive?

The latest order applies to major smartphone makers operating in the Indian market. These include Apple, a company that has in the past had disagreements with regulators over similar apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Government Order

An order dated 28 November provides phone manufacturers a 90-day period to guarantee that the official "Messenger Friend" application is included on all new devices. A critical provision is that owners will not be able to remove the application.

For phones already in the retail pipeline, manufacturers are instructed to deliver the application via software patches. It is important that this order was sent confidentially and was dispatched selectively to specific firms.

User Consent Concerns Expressed

However, technology specialists have raised significant concerns regarding this policy. A lawyer specialising in tech matters said that India's directive is a reason to worry.

“The government practically erodes user consent as a real choice,” said Mishi Choudhary, an advocate working on internet advocacy issues.

Privacy advocates had earlier condemned a similar mandate by Russia in August for a government-sponsored messenger called Max to be pre-installed on phones.

The Scope of the Indian Smartphone Landscape

India, among the world's biggest mobile markets, boasts more than 1.2 billion subscribers. Official statistics indicate that the cybersecurity application, launched in January, has reportedly helped recovering over 700,000 stolen phones, with approximately 50,000 found in October alone.

The government argues that the app is vital to fight the “significant endangerment” of telecom cybersecurity from duplicate or spoofed IMEI numbers, which are used for fraud and system abuse.

The Tech Giant's Stance

Apple's iOS powers an estimated 4.5% of the 735 million smartphones in India, with the rest using Android, according to industry analysis. While Apple pre-installs its own proprietary applications on its devices, its internal guidelines are said to prohibit the inclusion of any third-party application before the sale of a device.

“Apple has traditionally declined such demands from authorities,” commented Tarun Pathak, a research director at Counterpoint.

“It’s probable to seek a negotiated solution: rather than a compulsory inclusion, they might discuss and propose an option to nudge users towards installing the application.”

Queries for comment from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecoms department also did not respond.

Understanding the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each handset. It is primarily used by networks to block network access for phones reported as lost.

The government application is chiefly designed to enable users track and locate lost or stolen smartphones across all telecom networks, using a central registry. It also allows them to identify, and terminate, fraudulent mobile connections.

Notable Usage and Outcomes

With more than 5 million installs since its inception, the software has reportedly been used to disable over 3.7 million stolen or lost mobile phones. Furthermore, over 30 million fraudulent connections have also been blocked through its use.

The authorities states that the app helps combating cyberthreats and helps in the tracking and blocking of missing phones, thereby aiding police in tracing handsets and preventing cloned devices out of the black market.

David Alexander
David Alexander

Elara Vance is an investigative journalist with over a decade of experience covering international affairs and political developments across Europe.