India Directs Smartphone Manufacturers to Include Devices with State-Owned Cyber Safety App

In a notable move, India's telecommunications department has confidentially instructed smartphone companies to include all new devices with a state-owned cybersecurity tool that is non-removable. This order, which has been disclosed, is likely to concern major tech firms like Apple and raise questions among digital rights groups.

A Global Trend in Digital Security Policy

Addressing a rising tide of digital scams and hacking, The Indian authorities is aligning with governments internationally. This action echoes comparable regulations introduced in countries like Russia, which seek to prevent the use of stolen phones for scams and promote official applications.

What Companies Are Impacted by the Order?

The new mandate affects major mobile phone makers operating in the Indian market. These include Apple, which has in the past locked horns with regulators over similar apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Official Mandate

An order dated 28 November gives phone manufacturers a 90-day deadline to guarantee that the government's "Messenger Friend" app is included on all new mobile phones. A critical condition is that users are prevented from deleting the software.

For handsets currently in the retail pipeline, manufacturers are required to send the application via software updates. It is important that this directive was not made public and was communicated privately to select manufacturers.

User Consent Concerns Voiced

However, legal specialists have flagged serious concerns regarding this decision. A legal expert specialising in tech issues said that India's directive is a cause for concern.

“The government effectively erodes user consent as a genuine choice,” stated Mishi Choudhary, an expert working on digital advocacy matters.

Privacy advocates had earlier condemned a similar mandate by Russia in August for a state-backed messenger called Max to be pre-installed on phones.

The Scale of the Domestic Smartphone Landscape

India, among the world's largest mobile markets, boasts more than 1.2 billion connections. Official figures show that the cybersecurity application, launched in January, has reportedly helped recovering over 700,000 stolen phones, with an estimated 50,000 recovered in October alone.

The government states that the app is vital to combat the “significant endangerment” of telecom cybersecurity from fake or spoofed IMEI numbers, which are used for scams and network abuse.

Apple's Position

Apple's iOS powers an estimated 4.5% of the 735 million smartphones in India, with the vast majority using Android, according to market research. While Apple pre-installs its own proprietary apps on its devices, its company guidelines reportedly prohibit the installation of any third-party application before the sale of a smartphone.

“Apple has historically declined such mandates from governments,” commented Tarun Pathak, a analyst at Counterpoint.

“It’s likely to pursue a compromise: rather than a mandatory inclusion, they might discuss and propose an alternative to encourage users towards installing the app.”

Requests for comment from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecoms ministry also offered no comment.

The Role of the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each mobile device. It is typically used by operators to block network access for phones flagged as stolen.

The government application is primarily intended to enable users block and locate missing smartphones across all telecom networks, using a national database. It also lets them to detect, and terminate, illegal mobile connections.

Notable Usage and Outcomes

With more than 5 million downloads since its launch, the app has reportedly been used to block more than 3.7 million stolen or lost mobile phones. Moreover, more than 30 million fraudulent connections have also been blocked through its use.

The government asserts that the software helps preventing cyberthreats and helps in the locating and blocking of lost or stolen phones, thereby aiding police in recovering devices and keeping cloned devices out of the black market.