The Indian government Orders Mobile Manufacturers to Preload Devices with State-Owned Cybersecurity Application

In a significant decision, India's telecommunications authority has confidentially instructed mobile phone manufacturers to pre-install all new handsets with a government-backed cybersecurity app that must remain installed. This order, which has been disclosed, is set to antagonise major technology companies like Apple and raise questions among digital rights groups.

A Global Trend in Cybersecurity Policy

Addressing a growing wave of digital scams and device misuse, The Indian authorities is joining regulators internationally. This move parallels recent rules introduced in countries like Russia, which seek to prevent the use of stolen phones for fraud and encourage state-backed applications.

Which Companies Are Impacted by the Directive?

The latest order applies to leading smartphone makers operating in the domestic market. Among them are Apple, which has in the past locked horns with regulators over similar applications, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

Specifics of the Official Order

An order dated 28 November gives phone manufacturers a three-month deadline to guarantee that the government's "Messenger Friend" application is pre-installed on all new devices. A key stipulation is that consumers will not be able to remove the software.

For phones already in the supply chain, companies are required to deliver the app via software updates. It is important that this order was sent confidentially and was communicated selectively to specific companies.

Digital Rights Concerns Expressed

However, legal experts have expressed significant concerns regarding this policy. A legal expert focusing in tech matters stated that India's directive is a reason to worry.

“The government practically removes user consent as a real choice,” said Mishi Choudhary, an advocate working on digital rights issues.

Digital rights groups had also condemned a comparable requirement by Russia in August for a government-sponsored messenger called Max to be included on phones.

The Size of the Domestic Market

India, one of the world's biggest mobile markets, boasts more than 1.2 billion connections. Official figures reveal that the cybersecurity app, launched in January, has reportedly helped recovering over 700,000 lost phones, with approximately 50,000 found in October alone.

The authorities states that the tool is vital to tackle the “significant endangerment” of mobile network cybersecurity from duplicate or tampered IMEI numbers, which facilitate fraud and network abuse.

The Tech Giant's Stance

Apple's iOS runs on an estimated 4.5% of the 735 million mobile phones in India, with the vast majority using Android, as per market research. While Apple includes its own first-party applications on its devices, its internal policies reportedly ban the inclusion of any government application before the sale of a device.

“Apple has in the past declined such requests from authorities,” commented Tarun Pathak, a analyst at Counterpoint.

“It’s likely to aim for a middle ground: rather than a forced pre-install, they might negotiate and ask for an option to prompt users towards installing the app.”

Queries for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications department also remained silent.

The Role of the IMEI and the App's Purpose

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each handset. It is primarily used by networks to block network access for phones flagged as lost.

The government app is chiefly designed to enable users track and locate lost or stolen phones across all telecom networks, using a central registry. It also enables them to detect, and disconnect, fraudulent mobile connections.

Notable Adoption and Results

With over 5 million downloads since its inception, the app has already been used to block over 3.7 million missing mobile phones. Furthermore, more than 30 million fraudulent connections have also been blocked through its use.

The authorities claims that the tool helps combating digital threats and helps in the tracking and disabling of missing phones, thereby helping police in recovering devices and keeping counterfeits out of the black market.

Andrew Castillo
Andrew Castillo

A cybersecurity expert with over 15 years of experience in IT risk management and digital transformation strategies for global enterprises.