🔗 Share this article

In a significant step, India's telecommunications department has confidentially asked smartphone makers to include all new devices with a national cybersecurity application that cannot be deleted. This order, which was revealed, is expected to concern major tech companies like Apple and prompt concerns among digital rights groups.

A Worldwide Trend in Cybersecurity Regulation

To combat a growing wave of online fraud and hacking, India is following governments worldwide. This action parallels similar regulations enacted in countries like Russia, which are designed to prevent the use of stolen phones for fraud and promote government-developed tools.

What Companies Are Bound by the Order?

The recent order binds key smartphone brands operating in the domestic market. This encompasses Apple, which has previously clashed with regulators over similar applications, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Official Mandate

An order dated 28 November allots smartphone manufacturers a 90-day window to ensure that the government's "Messenger Friend" application is factory-loaded on all new handsets. A key provision is that users are prevented from deleting the software.

For phones already in the retail pipeline, makers are required to push the app via software updates. It is important that this order was not made public and was dispatched selectively to chosen companies.

Privacy Worries Expressed

However, legal experts have raised major concerns regarding this move. A lawyer specialising in tech matters said that India's action is a worrying development.

“The government practically eliminates user consent as a genuine choice,” said Mishi Choudhary, an advocate working on digital rights matters.

Privacy advocates had previously condemned a similar requirement by Russia in August for a state-backed messenger called Max to be included on phones.

The Scale of the Domestic Market

India, one of the world's biggest mobile markets, boasts more than 1.2 billion connections. Official data reveal that the cybersecurity app, launched in January, has reportedly assisted in tracking down over 700,000 stolen phones, with approximately 50,000 recovered in October by itself.

The government argues that the tool is essential to tackle the “serious endangerment” of mobile network cybersecurity from cloned or spoofed IMEI numbers, which facilitate fraud and system abuse.

The Tech Giant's Likely Response

Apple's iOS runs on an estimated 4.5% of the 735 million smartphones in India, with the vast majority using Android, as per market research. While Apple includes its own proprietary apps on its devices, its company rules reportedly forbid the inclusion of any third-party app before the purchase of a device.

“Apple has in the past resisted such mandates from governments,” said Tarun Pathak, a research director at Counterpoint.

“It’s likely to aim for a negotiated solution: rather than a forced pre-install, they might negotiate and propose an option to nudge users towards installing the app.”

Queries for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecoms ministry also did not respond.

Understanding the IMEI and the Application's Purpose

The IMEI, or International Mobile Equipment Identity, is a unique identification number assigned to each mobile device. It is most commonly used by networks to cut off cellular access for phones flagged as stolen.

The government app is primarily intended to enable users block and locate lost or stolen phones across all telecom networks, using a central database. It also allows them to spot, and disconnect, fraudulent mobile connections.

Impressive Usage and Outcomes

With more than 5 million installs since its inception, the app has reportedly been used to block over 3.7 million stolen or lost mobile phones. Moreover, more than 30 million fraudulent connections have also been disconnected through its use.

The government states that the app helps preventing cyberthreats and assists in the locating and blocking of missing phones, thereby aiding police in recovering handsets and keeping cloned devices out of the illicit trade.