In a major move, India's telecoms authority has discreetly instructed smartphone manufacturers to pre-install all new devices with a national cybersecurity application that is non-removable. This directive, which has come to light, is set to concern major technology companies like Apple and prompt questions among consumer watchdogs.
To combat a rising tide of digital scams and device misuse, The Indian authorities is following governments internationally. This move mirrors comparable regulations introduced in countries like Russia, which aim to block the use of stolen phones for fraud and push state-backed tools.
The new mandate affects major mobile phone companies active in the Indian market. This encompasses Apple, a company that has previously clashed with the telecom authority over comparable apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
An order dated 28 November provides smartphone companies a 90-day period to guarantee that the government's "Messenger Friend" application is included on all new mobile phones. A key condition is that users will not be able to remove the app.
For handsets already in the supply chain, makers are instructed to deliver the application via system patches. It is notable that this directive was sent confidentially and was communicated selectively to select firms.
However, technology experts have raised major concerns regarding this policy. A legal expert specialising in tech matters said that India's step is a reason to worry.
“The government effectively eliminates user consent as a genuine choice,” said Mishi Choudhary, an expert working on internet rights issues.
Digital rights groups had earlier questioned a comparable requirement by Russia in August for a state-backed messenger app to be included on phones.
India, among the world's biggest telephone markets, boasts more than 1.2 billion connections. Official figures show that the cybersecurity application, introduced in January, has already helped recovering over 700,000 stolen phones, with around 50,000 recovered in October alone.
The authorities argues that the tool is crucial to combat the “serious endangerment” of mobile network cybersecurity from duplicate or spoofed IMEI numbers, which are used for fraud and system abuse.
Apple's iOS powers an estimated 4.5% of the 735 million smartphones in India, with the vast majority using Android, according to industry analysis. While Apple pre-installs its own first-party applications on its devices, its company guidelines are said to forbid the inclusion of any government app before the sale of a smartphone.
“Apple has traditionally refused these kinds of mandates from governments,” noted Tarun Pathak, a analyst at Counterpoint.
“It’s probable to seek a compromise: instead of a mandatory inclusion, they might discuss and ask for an option to nudge users towards downloading the app.”
Queries for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecommunications department also offered no comment.
The IMEI, or International Mobile Equipment Identity, is a unique identification number assigned to each mobile device. It is most commonly used by carriers to block cellular access for phones reported as lost.
The government app is primarily designed to enable users block and locate missing phones across all telecom networks, using a national database. It also enables them to identify, and terminate, unauthorised mobile connections.
With more than 5 million installs since its inception, the software has already been used to block more than 3.7 million stolen or lost mobile phones. Additionally, more than 30 million fraudulent connections have also been blocked through its use.
The government claims that the app helps preventing cyberthreats and helps in the tracking and blocking of lost or stolen phones, thereby helping police in recovering devices and preventing cloned devices out of the black market.
A tech strategist and writer passionate about digital transformation and emerging technologies.