🔗 Share this article

In a major move, India's telecommunications department has discreetly instructed smartphone manufacturers to preload all new phones with a state-owned cybersecurity tool that cannot be deleted. This directive, which has been disclosed, is expected to antagonise major technology companies like Apple and prompt concerns among digital rights groups.

An International Shift in Digital Security Policy

Addressing a rising tide of online fraud and phone theft, India is joining authorities internationally. This move parallels similar regulations introduced in countries like Russia, which are designed to prevent the use of stolen phones for scams and push official tools.

What Companies Are Impacted by the Directive?

The new directive binds key mobile phone makers active in the Indian market. These include Apple, a company that has in the past had disagreements with regulators over comparable apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Official Mandate

An order dated 28 November provides phone companies a three-month period to ensure that the government's "Messenger Friend" app is included on all new devices. A critical stipulation is that owners cannot disable the application.

For phones currently in the retail pipeline, manufacturers are directed to send the application via software upgrades. It is notable that this order was sent confidentially and was dispatched selectively to select manufacturers.

User Consent Worries Expressed

However, legal analysts have flagged major concerns regarding this decision. A legal expert focusing in tech issues commented that India's action is a worrying development.

“The government in essence removes user consent as a genuine choice,” commented Mishi Choudhary, an expert working on digital advocacy issues.

Consumer organisations had also condemned a comparable requirement by Russia in August for a government-sponsored messenger called Max to be pre-installed on phones.

The Scope of the Domestic Smartphone Landscape

India, among the world's largest mobile markets, boasts over 1.2 billion mobile users. Government data show that the cybersecurity application, launched in January, has already assisted in locating over 700,000 lost phones, with around 50,000 found in October by itself.

The authorities contends that the software is crucial to combat the “serious endangerment” of telecom cybersecurity from cloned or spoofed IMEI numbers, which are used for illicit activities and system misuse.

The Tech Giant's Likely Response

Apple's iOS runs on an approximate 4.5% of the 735 million smartphones in India, with the rest using Android, as per industry analysis. While Apple includes its own first-party applications on its devices, its internal rules are said to ban the inclusion of any third-party app before the sale of a smartphone.

“Apple has historically declined these kinds of mandates from authorities,” noted Tarun Pathak, a research director at Counterpoint.

“It’s likely to seek a compromise: instead of a forced pre-install, they might negotiate and ask for an option to nudge users towards downloading the app.”

Requests for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecoms ministry also offered no comment.

The Role of the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a unique identification number unique to each handset. It is most commonly used by operators to disable network access for phones flagged as lost.

The government application is chiefly intended to help users track and locate missing phones across all mobile carriers, using a central registry. It also allows them to identify, and block, fraudulent mobile connections.

Impressive Adoption and Results

With more than 5 million downloads since its release, the software has reportedly helped block more than 3.7 million missing mobile phones. Furthermore, more than 30 million fraudulent connections have also been disconnected through its use.

The government claims that the app helps combating cyberthreats and assists in the tracking and disabling of lost or stolen phones, thereby aiding police in recovering handsets and preventing counterfeits out of the black market.