🔗 Share this article

In a notable step, India's telecommunications department has confidentially directed smartphone manufacturers to include all new phones with a government-backed cybersecurity tool that is non-removable. This directive, which has come to light, is likely to antagonise leading tech companies like Apple and prompt questions among digital rights groups.

An International Shift in Cybersecurity Regulation

In tackling a rising tide of cybercrime and phone theft, India is following authorities across the globe. This action echoes recent rules introduced in countries like Russia, which aim to block the use of lost phones for scams and push state-backed service apps.

What Manufacturers Are Affected by the Directive?

The new order binds major mobile phone makers active in the Indian market. Among them are Apple, a company that has previously clashed with the telecom authority over similar apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Government Mandate

An order dated 28 November provides phone manufacturers a three-month deadline to ensure that the official "Messenger Friend" app is included on all new devices. A critical provision is that users are prevented from deleting the application.

For devices currently in the supply chain, manufacturers are instructed to deliver the application via software upgrades. It is worth mentioning that this directive was not made public and was communicated in confidence to select firms.

User Consent Concerns Voiced

However, legal analysts have flagged major worries regarding this policy. A legal expert focusing in tech matters commented that India's directive is a cause for concern.

“The government practically eliminates user consent as a real choice,” stated Mishi Choudhary, an expert working on internet rights issues.

Privacy advocates had earlier criticised a similar requirement by Russia in August for a government-sponsored messenger called Max to be pre-installed on phones.

The Scale of the Indian Smartphone Landscape

India, one of the world's largest mobile markets, boasts more than 1.2 billion subscribers. Government figures indicate that the cybersecurity app, introduced in January, has already helped tracking down more than 700,000 lost phones, with an estimated 50,000 recovered in October by itself.

The government states that the app is crucial to fight the “serious endangerment” of telecom cybersecurity from duplicate or spoofed IMEI numbers, which facilitate fraud and network misuse.

Apple's Position

Apple's iOS runs on an estimated 4.5% of the 735 million mobile phones in India, with the rest using Android, according to market research. While Apple pre-installs its own proprietary applications on its devices, its internal policies are said to forbid the installation of any government app before the sale of a smartphone.

“Apple has historically refused such mandates from authorities,” said Tarun Pathak, a research director at Counterpoint.

“It’s expected to seek a negotiated solution: rather than a compulsory pre-install, they might discuss and propose an option to nudge users towards installing the application.”

Requests for comment from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecommunications department also remained silent.

Understanding the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is primarily used by carriers to cut off cellular access for phones reported as stolen.

The government app is mainly intended to enable users track and locate missing phones across all mobile carriers, using a national database. It also enables them to detect, and disconnect, fraudulent mobile connections.

Notable Adoption and Outcomes

With more than 5 million downloads since its release, the software has already helped block over 3.7 million missing mobile phones. Moreover, over 30 million fraudulent connections have also been terminated through its use.

The government asserts that the app helps preventing cyberthreats and assists in the tracking and blocking of missing phones, thereby aiding police in recovering devices and keeping counterfeits out of the illicit trade.