India Mandates Smartphone Makers to Preload Devices with State-Owned Cybersecurity App
In a major decision, India's telecoms ministry has privately directed smartphone companies to pre-install all new phones with a government-backed cybersecurity tool that is non-removable. This directive, which was revealed, is likely to antagonise leading tech companies like Apple and prompt questions among digital rights groups.
An International Trend in Cybersecurity Regulation
To combat a recent surge of online fraud and phone theft, India is following governments internationally. This step echoes similar measures introduced in countries like Russia, which aim to curb the use of stolen phones for scams and promote official tools.
Which Companies Are Bound by the Order?
The recent order applies to major mobile phone brands operating in the Indian market. Among them are Apple, a company that has in the past had disagreements with regulators over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
Specifics of the Official Mandate
An directive dated 28 November gives phone manufacturers a three-month window to ensure that the official "Messenger Friend" application is included on all new devices. A critical provision is that consumers cannot disable the application.
For handsets already in the distribution network, makers are required to send the application via system updates. It is notable that this directive was not made public and was dispatched selectively to select firms.
Digital Rights Apprehensions Raised
However, technology analysts have raised significant concerns regarding this policy. A lawyer specialising in tech law stated that India's action is a reason to worry.
“The government effectively eliminates user consent as a genuine choice,” said Mishi Choudhary, an advocate working on internet advocacy issues.
Privacy advocates had earlier condemned a similar requirement by Russia in August for a government-sponsored messenger called Max to be pre-installed on phones.
The Scale of the Indian Market
India, among the world's biggest mobile markets, boasts over 1.2 billion subscribers. Government data show that the cybersecurity application, introduced in January, has reportedly helped locating more than 700,000 stolen phones, with approximately 50,000 found in October alone.
The government states that the software is vital to fight the “grave endangerment” of telecom cybersecurity from duplicate or tampered IMEI numbers, which are used for illicit activities and network abuse.
The Tech Giant's Stance
Apple's iOS runs on an estimated 4.5% of the 735 million mobile phones in India, with the rest using Android, according to industry analysis. While Apple pre-installs its own first-party applications on its devices, its internal policies are said to prohibit the installation of any government app before the sale of a device.
“Apple has in the past declined these kinds of demands from authorities,” commented Tarun Pathak, a analyst at Counterpoint.
“It’s probable to seek a compromise: instead of a forced inclusion, they might negotiate and ask for an alternative to nudge users towards installing the app.”
Requests for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications ministry also did not respond.
The Role of the IMEI and the App's Purpose
The IMEI, or International Mobile Equipment Identity, is a unique identification number unique to each mobile device. It is primarily used by networks to cut off cellular access for phones reported as lost.
The government app is primarily designed to help users block and locate lost or stolen smartphones across all telecom networks, using a central registry. It also lets them to spot, and terminate, unauthorised mobile connections.
Impressive Usage and Results
With more than 5 million downloads since its inception, the software has reportedly helped disable more than 3.7 million stolen or lost mobile phones. Moreover, over 30 million fraudulent connections have also been disconnected through its use.
The government asserts that the software aids in combating cyberthreats and helps in the tracking and blocking of missing phones, thereby helping police in recovering devices and preventing counterfeits out of the illicit trade.