India Mandates Smartphone Makers to Preload Handsets with National Cybersecurity App
In a significant step, India's telecommunications department has discreetly instructed mobile phone makers to pre-install all new devices with a national cybersecurity app that cannot be deleted. This directive, which has come to light, is expected to concern leading technology companies like Apple and raise concerns among consumer watchdogs.
An International Shift in Cybersecurity Regulation
Addressing a growing wave of online fraud and hacking, The Indian authorities is joining governments worldwide. This move parallels similar regulations framed in countries like Russia, which aim to prevent the use of stolen phones for scams and encourage official tools.
Which Manufacturers Are Bound by the Order?
The recent mandate applies to key smartphone companies operating in the domestic market. This encompasses Apple, which has in the past had disagreements with regulators over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
The Fine Print of the Government Mandate
An order dated 28 November gives phone manufacturers a 90-day deadline to ensure that the official "Messenger Friend" app is included on all new devices. A notable stipulation is that consumers are prevented from deleting the application.
For devices already in the distribution network, manufacturers are required to push the application via software patches. It is notable that this directive was sent confidentially and was dispatched in confidence to specific manufacturers.
Privacy Concerns Voiced
However, technology experts have expressed major concerns regarding this decision. A lawyer specialising in tech law commented that India's step is a reason to worry.
“The government in essence removes user consent as a real choice,” stated Mishi Choudhary, an expert working on internet advocacy issues.
Digital rights groups had previously criticised a comparable mandate by Russia in August for a government-sponsored communication called Max to be pre-installed on phones.
The Scope of the Domestic Smartphone Landscape
India, one of the world's biggest telephone markets, boasts more than 1.2 billion subscribers. Official statistics reveal that the cybersecurity application, introduced in January, has reportedly helped recovering over 700,000 stolen phones, with an estimated 50,000 found in October alone.
The authorities argues that the software is crucial to combat the “serious endangerment” of telecom cybersecurity from duplicate or tampered IMEI numbers, which enable fraud and network misuse.
The Tech Giant's Likely Response
Apple's iOS runs on an estimated 4.5% of the 735 million mobile phones in India, with the rest using Android, according to industry analysis. While Apple includes its own proprietary applications on its devices, its internal policies reportedly prohibit the inclusion of any third-party application before the sale of a device.
“Apple has traditionally declined such requests from authorities,” noted Tarun Pathak, a research director at Counterpoint.
“It’s expected to seek a middle ground: rather than a compulsory pre-install, they might discuss and propose an option to nudge users towards installing the app.”
Requests for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecommunications department also did not respond.
The Role of the IMEI and the App's Function
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is primarily used by operators to cut off network access for phones reported as stolen.
The government app is chiefly created to enable users block and track missing phones across all telecom networks, using a national registry. It also allows them to spot, and terminate, illegal mobile connections.
Notable Adoption and Results
With over 5 million downloads since its launch, the software has reportedly been used to block over 3.7 million stolen or lost mobile phones. Additionally, more than 30 million illegal connections have also been terminated through its use.
The government asserts that the tool helps combating cyberthreats and assists in the locating and blocking of missing phones, thereby helping police in recovering devices and preventing cloned devices out of the black market.