In a notable decision, India's telecoms authority has confidentially instructed smartphone companies to include all new handsets with a national cybersecurity application that cannot be deleted. This mandate, which was revealed, is set to antagonise leading tech firms like Apple and prompt questions among privacy advocates.
Addressing a growing wave of online fraud and hacking, The Indian authorities is following authorities worldwide. This move mirrors similar measures enacted in nations like Russia, which seek to block the use of stolen phones for scams and promote official tools.
The recent mandate affects key mobile phone companies operating in the Indian market. These include Apple, a company that has in the past had disagreements with regulators over comparable applications, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.
An order dated 28 November allots phone companies a three-month deadline to ensure that the government's "Messenger Friend" application is pre-installed on all new mobile phones. A key provision is that owners will not be able to remove the application.
For devices already in the supply chain, makers are required to send the application via software upgrades. It is notable that this directive was sent confidentially and was dispatched in confidence to specific companies.
However, legal specialists have flagged serious concerns regarding this decision. A lawyer focusing in technology law commented that India's step is a cause for concern.
“The government practically eliminates user consent as a real choice,” said Mishi Choudhary, an advocate working on digital rights issues.
Digital rights groups had previously questioned a similar requirement by Russia in August for a state-backed messenger called Max to be pre-installed on phones.
India, among the world's biggest telephone markets, boasts more than 1.2 billion connections. Official figures show that the Sanchar Saathi app, introduced in January, has reportedly assisted in tracking down more than 700,000 stolen phones, with approximately 50,000 found in October alone.
The government states that the tool is vital to combat the “grave endangerment” of mobile network cybersecurity from duplicate or tampered IMEI numbers, which facilitate illicit activities and system misuse.
Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, according to market research. While Apple pre-installs its own proprietary applications on its devices, its internal policies are said to ban the installation of any third-party application before the purchase of a device.
“Apple has traditionally refused such requests from governments,” said Tarun Pathak, a analyst at Counterpoint.
“It’s probable to seek a middle ground: instead of a mandatory pre-install, they might negotiate and propose an option to nudge users towards downloading the application.”
Requests for response from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecommunications department also offered no comment.
The IMEI, or International Mobile Equipment Identity, is a unique identification number unique to each mobile device. It is typically used by carriers to cut off network access for phones flagged as lost.
The government app is chiefly created to help users track and track lost or stolen smartphones across all mobile carriers, using a national registry. It also allows them to detect, and disconnect, illegal mobile connections.
With more than 5 million installs since its launch, the app has already been used to block over 3.7 million missing mobile phones. Furthermore, more than 30 million fraudulent connections have also been disconnected through its use.
The government claims that the tool helps combating cyberthreats and helps in the locating and disabling of missing phones, thereby helping police in recovering devices and keeping counterfeits out of the black market.
Agile coach and software developer with over a decade of experience in transforming teams and delivering innovative solutions.