The Indian government Orders Phone Manufacturers to Include Handsets with National Cybersecurity App

In a significant step, India's telecoms department has privately instructed smartphone companies to pre-install all new phones with a government-backed cybersecurity application that must remain installed. This mandate, which has come to light, is expected to antagonise major technology firms like Apple and prompt concerns among consumer watchdogs.

A Global Shift in Cybersecurity Regulation

In tackling a growing wave of digital scams and device misuse, India is aligning with governments worldwide. This move echoes comparable regulations framed in countries like Russia, which are designed to curb the use of stolen phones for scams and promote official tools.

What Companies Are Affected by the Order?

The latest mandate applies to leading mobile phone companies active in the Indian market. This encompasses Apple, a company that has in the past had disagreements with the telecom authority over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Details of the Official Mandate

An order dated 28 November allots smartphone companies a 90-day deadline to ensure that the government's "Messenger Friend" app is included on all new devices. A notable condition is that owners are prevented from deleting the application.

For devices already in the supply chain, manufacturers are instructed to send the app via software patches. It is important that this directive was not made public and was dispatched privately to chosen firms.

Digital Rights Concerns Expressed

However, legal experts have flagged major apprehensions regarding this decision. A legal expert specialising in technology issues said that India's step is a cause for concern.

“The government effectively removes user consent as a genuine choice,” stated Mishi Choudhary, an expert working on digital advocacy matters.

Consumer organisations had earlier criticised a comparable requirement by Russia in August for a government-sponsored messenger app to be included on phones.

The Size of the Indian Smartphone Landscape

India, one of the world's biggest telephone markets, boasts over 1.2 billion mobile users. Government statistics indicate that the cybersecurity application, introduced in January, has reportedly assisted in recovering over 700,000 lost phones, with around 50,000 found in October alone.

The authorities contends that the tool is crucial to fight the “serious endangerment” of mobile network cybersecurity from fake or tampered IMEI numbers, which are used for fraud and network misuse.

The Tech Giant's Position

Apple's iOS runs on an approximate 4.5% of the 735 million smartphones in India, with the rest using Android, according to market research. While Apple includes its own first-party applications on its devices, its internal policies are said to prohibit the inclusion of any government app before the sale of a device.

“Apple has historically refused these kinds of demands from authorities,” said Tarun Pathak, a research director at Counterpoint.

“It’s expected to aim for a negotiated solution: rather than a mandatory pre-install, they might discuss and ask for an alternative to prompt users towards installing the app.”

Requests for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecommunications department also did not respond.

The Role of the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is typically used by networks to cut off network access for phones reported as lost.

The government application is mainly designed to enable users block and track missing smartphones across all telecom networks, using a central registry. It also enables them to spot, and block, illegal mobile connections.

Impressive Adoption and Results

With more than 5 million downloads since its release, the app has reportedly helped block over 3.7 million missing mobile phones. Additionally, over 30 million fraudulent connections have also been terminated through its use.

The government states that the software helps preventing cyberthreats and helps in the locating and blocking of lost or stolen phones, thereby helping police in recovering handsets and preventing cloned devices out of the black market.