🔗 Share this article

In a significant step, India's telecommunications department has privately instructed smartphone makers to pre-install all new phones with a state-owned cybersecurity tool that is non-removable. This directive, which has come to light, is likely to concern major tech companies like Apple and prompt questions among digital rights groups.

An International Pattern in Digital Security Policy

Addressing a growing wave of digital scams and hacking, The Indian authorities is aligning with regulators internationally. This move mirrors similar regulations enacted in nations like Russia, which are designed to block the use of stolen phones for fraud and promote state-backed applications.

What Manufacturers Are Bound by the Order?

The new directive applies to major mobile phone companies active in the Indian market. These include Apple, a company that has in the past locked horns with regulators over comparable applications, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Government Order

An order dated 28 November gives phone manufacturers a three-month window to guarantee that the government's "Messenger Friend" application is factory-loaded on all new devices. A critical condition is that users are prevented from deleting the app.

For phones currently in the retail pipeline, companies are required to deliver the app via software patches. It is worth mentioning that this order was privately circulated and was communicated in confidence to select companies.

User Consent Worries Voiced

However, technology analysts have flagged serious concerns regarding this decision. A lawyer specialising in technology matters said that India's step is a cause for concern.

“The government in essence erodes user consent as a genuine choice,” stated Mishi Choudhary, an expert working on internet rights issues.

Privacy advocates had earlier questioned a comparable requirement by Russia in August for a state-backed messenger app to be pre-installed on phones.

The Size of the Indian Market

India, one of the world's largest mobile markets, boasts more than 1.2 billion subscribers. Government data indicate that the cybersecurity app, introduced in January, has reportedly assisted in recovering more than 700,000 lost phones, with approximately 50,000 recovered in October alone.

The authorities states that the tool is vital to combat the “serious endangerment” of telecom cybersecurity from duplicate or tampered IMEI numbers, which facilitate fraud and system abuse.

Apple's Position

Apple's iOS runs on an approximate 4.5% of the 735 million mobile phones in India, with the rest using Android, as per market research. While Apple includes its own proprietary apps on its devices, its internal guidelines reportedly prohibit the installation of any government app before the purchase of a device.

“Apple has in the past refused such mandates from authorities,” said Tarun Pathak, a research director at Counterpoint.

“It’s expected to pursue a negotiated solution: instead of a forced pre-install, they might negotiate and ask for an option to nudge users towards downloading the app.”

Queries for comment from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecoms department also remained silent.

The Role of the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is typically used by carriers to block cellular access for phones reported as lost.

The government application is primarily designed to help users block and locate lost or stolen phones across all mobile carriers, using a central registry. It also allows them to identify, and disconnect, fraudulent mobile connections.

Notable Adoption and Outcomes

With over 5 million installs since its launch, the software has already been used to block over 3.7 million stolen or lost mobile phones. Additionally, over 30 million fraudulent connections have also been terminated through its use.

The authorities states that the software aids in combating cyberthreats and assists in the locating and disabling of missing phones, thereby helping police in tracing handsets and keeping counterfeits out of the black market.