India Orders Mobile Producers to Include Devices with National Cybersecurity Application
In a significant move, India's telecoms department has confidentially instructed smartphone makers to include all new handsets with a national cybersecurity tool that must remain installed. This mandate, which has come to light, is expected to antagonise major tech firms like Apple and raise questions among privacy advocates.
An International Pattern in Cybersecurity Regulation
Addressing a recent surge of digital scams and phone theft, India is aligning with regulators worldwide. This step echoes recent rules introduced in countries like Russia, which aim to prevent the use of lost phones for fraud and encourage official service apps.
What Manufacturers Are Bound by the Order?
The latest mandate applies to major mobile phone brands operating in the domestic market. These include Apple, which has previously locked horns with regulators over comparable applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
Details of the Official Mandate
An directive dated 28 November provides smartphone manufacturers a 90-day deadline to ensure that the official Sanchar Saathi application is factory-loaded on all new devices. A critical condition is that users cannot disable the app.
For devices currently in the distribution network, makers are directed to deliver the application via software upgrades. It is notable that this order was sent confidentially and was communicated selectively to select firms.
Digital Rights Concerns Raised
However, technology specialists have flagged major worries regarding this move. A legal expert specialising in technology law said that India's action is a reason to worry.
“The government practically removes user consent as a real choice,” said Mishi Choudhary, an advocate working on internet rights matters.
Consumer organisations had previously questioned a similar mandate by Russia in August for a state-backed messenger called Max to be pre-installed on phones.
The Scale of the Domestic Smartphone Landscape
India, among the world's largest telephone markets, boasts more than 1.2 billion subscribers. Official data indicate that the Sanchar Saathi app, launched in January, has already helped locating more than 700,000 stolen phones, with approximately 50,000 found in October alone.
The government argues that the app is crucial to tackle the “grave endangerment” of telecom cybersecurity from fake or spoofed IMEI numbers, which are used for scams and system misuse.
Apple's Stance
Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per market research. While Apple includes its own first-party applications on its devices, its internal guidelines reportedly forbid the installation of any government app before the purchase of a smartphone.
“Apple has traditionally declined such requests from authorities,” noted Tarun Pathak, a research director at Counterpoint.
“It’s probable to seek a negotiated solution: rather than a compulsory pre-install, they might negotiate and propose an alternative to prompt users towards installing the application.”
Queries for response from Apple, Google, Samsung, and Xiaomi were unresponded. India’s telecoms ministry also did not respond.
Understanding the IMEI and the Application's Purpose
The IMEI, or International Mobile Equipment Identity, is a unique identification number unique to each mobile device. It is most commonly used by operators to block network access for phones flagged as stolen.
The Sanchar Saathi app is primarily designed to help users block and track lost or stolen phones across all telecom networks, using a central registry. It also allows them to detect, and terminate, fraudulent mobile connections.
Notable Usage and Results
With more than 5 million downloads since its launch, the software has reportedly helped block over 3.7 million stolen or lost mobile phones. Additionally, over 30 million illegal connections have also been blocked through its use.
The government states that the software aids in combating cyberthreats and assists in the tracking and disabling of missing phones, thereby aiding police in recovering handsets and preventing cloned devices out of the illicit trade.