India Directs Phone Producers to Pre-install Handsets with National Cybersecurity App

In a significant move, India's telecoms authority has privately asked mobile phone makers to include all new devices with a government-backed cybersecurity application that must remain installed. This mandate, which has come to light, is set to antagonise leading tech firms like Apple and raise concerns among consumer watchdogs.

A Worldwide Trend in Cybersecurity Regulation

In tackling a growing wave of cybercrime and phone theft, India is joining authorities internationally. This move parallels similar rules introduced in nations like Russia, which seek to prevent the use of stolen phones for illicit activities and encourage state-backed tools.

What Companies Are Impacted by the Directive?

The latest order applies to leading mobile phone makers operating in the Indian market. Among them are Apple, a company that has in the past clashed with the telecom authority over similar apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.

The Fine Print of the Government Mandate

An directive dated 28 November gives smartphone manufacturers a three-month deadline to guarantee that the government's "Messenger Friend" app is factory-loaded on all new handsets. A critical condition is that users are prevented from deleting the software.

For devices currently in the distribution network, companies are required to send the application via software upgrades. It is important that this directive was privately circulated and was communicated in confidence to select companies.

Privacy Concerns Expressed

However, technology specialists have expressed significant concerns regarding this move. A legal expert specialising in technology matters stated that India's action is a cause for concern.

“The government in essence removes user consent as a genuine choice,” commented Mishi Choudhary, an advocate working on internet rights issues.

Digital rights groups had also criticised a similar requirement by Russia in August for a state-backed communication app to be pre-installed on phones.

The Scope of the Indian Market

India, one of the world's biggest telephone markets, boasts over 1.2 billion connections. Official statistics show that the cybersecurity app, launched in January, has reportedly assisted in locating over 700,000 stolen phones, with approximately 50,000 recovered in October by itself.

The authorities argues that the tool is crucial to combat the “serious endangerment” of telecom cybersecurity from duplicate or spoofed IMEI numbers, which are used for fraud and network misuse.

The Tech Giant's Likely Response

Apple's iOS runs on an approximate 4.5% of the 735 million mobile phones in India, with the rest using Android, as per market research. While Apple pre-installs its own first-party applications on its devices, its company guidelines reportedly ban the installation of any government app before the sale of a device.

“Apple has in the past resisted such mandates from authorities,” said Tarun Pathak, a research director at Counterpoint.

“It’s expected to seek a negotiated solution: rather than a mandatory pre-install, they might negotiate and ask for an option to prompt users towards downloading the application.”

Requests for response from Apple, Google, Samsung, and Xiaomi were unanswered. India’s telecoms department also did not respond.

Understanding the IMEI and the App's Function

The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number assigned to each mobile device. It is most commonly used by operators to block network access for phones reported as lost.

The government app is primarily intended to help users block and track lost or stolen smartphones across all mobile carriers, using a central database. It also enables them to spot, and disconnect, fraudulent mobile connections.

Impressive Adoption and Results

With more than 5 million installs since its release, the software has reportedly helped disable over 3.7 million missing mobile phones. Moreover, more than 30 million fraudulent connections have also been terminated through its use.

The authorities claims that the software helps combating digital threats and assists in the locating and blocking of lost or stolen phones, thereby helping police in tracing devices and keeping counterfeits out of the illicit trade.