🔗 Share this article

In a significant step, India's telecoms department has privately instructed smartphone makers to pre-install all new devices with a state-owned cybersecurity application that cannot be deleted. This order, which has been disclosed, is set to concern leading tech companies like Apple and prompt questions among consumer watchdogs.

An International Pattern in Cybersecurity Policy

To combat a rising tide of cybercrime and device misuse, India is aligning with authorities worldwide. This step parallels comparable measures introduced in nations like Russia, which aim to block the use of lost phones for fraud and encourage official tools.

What Companies Are Affected by the Order?

The latest directive applies to major mobile phone brands active in the Indian market. This encompasses Apple, a company that has in the past had disagreements with regulators over comparable apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Details of the Official Mandate

An directive dated 28 November gives phone companies a 90-day deadline to guarantee that the official "Messenger Friend" application is included on all new handsets. A notable condition is that users will not be able to remove the application.

For phones already in the retail pipeline, manufacturers are directed to deliver the application via system updates. It is notable that this order was not made public and was sent selectively to select companies.

User Consent Worries Expressed

However, technology experts have flagged significant worries regarding this decision. A lawyer specialising in tech law commented that India's step is a reason to worry.

“The government effectively erodes user consent as a meaningful choice,” commented Mishi Choudhary, an expert working on internet advocacy matters.

Privacy advocates had earlier condemned a similar requirement by Russia in August for a state-backed messenger app to be included on phones.

The Scope of the Domestic Smartphone Landscape

India, among the world's largest telephone markets, boasts over 1.2 billion connections. Government statistics indicate that the cybersecurity application, launched in January, has reportedly helped tracking down more than 700,000 stolen phones, with around 50,000 recovered in October alone.

The authorities argues that the software is essential to fight the “significant endangerment” of telecom cybersecurity from duplicate or spoofed IMEI numbers, which are used for scams and network misuse.

The Tech Giant's Likely Response

Apple's iOS runs on an estimated 4.5% of the 735 million mobile phones in India, with the rest using Android, as per industry analysis. While Apple pre-installs its own proprietary apps on its devices, its internal guidelines are said to ban the installation of any government app before the purchase of a smartphone.

“Apple has traditionally resisted these kinds of requests from governments,” commented Tarun Pathak, a analyst at Counterpoint.

“It’s likely to seek a negotiated solution: rather than a mandatory pre-install, they might discuss and propose an alternative to encourage users towards downloading the app.”

Queries for comment from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecommunications department also remained silent.

Understanding the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a unique identification number assigned to each handset. It is primarily used by carriers to block network access for phones reported as lost.

The government app is mainly designed to help users block and track lost or stolen smartphones across all telecom networks, using a central database. It also enables them to spot, and terminate, unauthorised mobile connections.

Impressive Usage and Results

With over 5 million downloads since its release, the app has already been used to disable more than 3.7 million missing mobile phones. Additionally, more than 30 million fraudulent connections have also been disconnected through its use.

The government asserts that the software helps combating cyberthreats and assists in the locating and blocking of lost or stolen phones, thereby aiding police in tracing handsets and keeping counterfeits out of the black market.