India Orders Phone Producers to Include Handsets with Government-Backed Cybersecurity Application

In a major step, India's telecommunications authority has discreetly instructed mobile phone companies to pre-install all new handsets with a state-owned cybersecurity application that cannot be deleted. This mandate, which has come to light, is likely to alarm major tech firms like Apple and prompt concerns among consumer watchdogs.

A Global Shift in Cybersecurity Regulation

Addressing a rising tide of cybercrime and phone theft, India is aligning with regulators across the globe. This action parallels comparable regulations framed in nations like Russia, which aim to curb the use of lost phones for fraud and push government-developed service apps.

What Manufacturers Are Affected by the Order?

The recent directive binds major mobile phone makers active in the domestic market. These include Apple, which has in the past locked horns with regulators over comparable apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Official Mandate

An order dated 28 November allots smartphone manufacturers a three-month window to ensure that the government's "Messenger Friend" application is factory-loaded on all new handsets. A key provision is that consumers are prevented from deleting the application.

For devices already in the supply chain, companies are required to push the application via software updates. It is important that this directive was sent confidentially and was communicated privately to select companies.

Digital Rights Concerns Raised

However, technology specialists have expressed serious concerns regarding this policy. A legal expert specialising in technology matters stated that India's action is a worrying development.

“The government practically erodes user consent as a real choice,” stated Mishi Choudhary, an advocate working on digital advocacy issues.

Digital rights groups had also questioned a similar mandate by Russia in August for a state-backed messenger called Max to be included on phones.

The Scale of the Domestic Smartphone Landscape

India, among the world's biggest telephone markets, boasts more than 1.2 billion mobile users. Government figures indicate that the cybersecurity application, launched in January, has already assisted in tracking down more than 700,000 stolen phones, with around 50,000 found in October by itself.

The government contends that the software is essential to combat the “serious endangerment” of mobile network cybersecurity from fake or tampered IMEI numbers, which enable scams and system abuse.

Apple's Stance

Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the rest using Android, as per industry analysis. While Apple pre-installs its own first-party applications on its devices, its internal guidelines are said to forbid the installation of any government app before the sale of a smartphone.

“Apple has in the past refused these kinds of requests from authorities,” said Tarun Pathak, a research director at Counterpoint.

“It’s probable to pursue a negotiated solution: rather than a mandatory inclusion, they might negotiate and ask for an option to nudge users towards downloading the application.”

Queries for response from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecommunications ministry also did not respond.

Understanding the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each handset. It is most commonly used by networks to disable network access for phones flagged as lost.

The government app is primarily designed to enable users block and locate missing phones across all telecom networks, using a national database. It also allows them to identify, and disconnect, fraudulent mobile connections.

Impressive Adoption and Outcomes

With more than 5 million installs since its release, the app has already helped block more than 3.7 million stolen or lost mobile phones. Moreover, more than 30 million fraudulent connections have also been blocked through its use.

The authorities states that the tool aids in preventing digital threats and assists in the locating and blocking of missing phones, thereby helping police in tracing devices and keeping counterfeits out of the black market.