The Indian government Mandates Smartphone Makers to Preload Devices with National Cybersecurity Application
In a major decision, India's telecommunications department has discreetly directed mobile phone companies to pre-install all new handsets with a national cybersecurity application that must remain installed. This mandate, which was revealed, is likely to antagonise major tech companies like Apple and prompt concerns among privacy advocates.
An International Pattern in Digital Security Regulation
In tackling a growing wave of digital scams and hacking, India is following governments worldwide. This move mirrors similar rules enacted in nations like Russia, which are designed to prevent the use of stolen phones for scams and promote government-developed tools.
Which Manufacturers Are Affected by the Order?
The new directive applies to leading smartphone makers active in the Indian market. This encompasses Apple, which has previously had disagreements with the telecom authority over comparable apps, as well as leaders like Samsung, Vivo, Oppo, and Xiaomi.
The Fine Print of the Government Order
An order dated 28 November allots smartphone manufacturers a three-month deadline to ensure that the government's "Messenger Friend" application is included on all new devices. A key stipulation is that users will not be able to remove the app.
For handsets currently in the retail pipeline, companies are directed to push the app via system updates. It is notable that this order was privately circulated and was dispatched in confidence to specific companies.
User Consent Apprehensions Raised
However, technology experts have expressed major concerns regarding this move. A legal expert focusing in tech issues commented that India's step is a cause for concern.
“The government practically eliminates user consent as a genuine choice,” said Mishi Choudhary, an advocate working on digital rights matters.
Digital rights groups had previously criticised a similar mandate by Russia in August for a government-sponsored messenger called Max to be pre-installed on phones.
The Scope of the Indian Smartphone Landscape
India, one of the world's biggest mobile markets, boasts over 1.2 billion mobile users. Official figures indicate that the cybersecurity application, introduced in January, has already assisted in locating more than 700,000 lost phones, with an estimated 50,000 found in October alone.
The authorities states that the tool is essential to combat the “significant endangerment” of telecom cybersecurity from cloned or spoofed IMEI numbers, which facilitate illicit activities and network abuse.
The Tech Giant's Likely Response
Apple's iOS powers an approximate 4.5% of the 735 million mobile phones in India, with the rest using Android, according to industry analysis. While Apple pre-installs its own proprietary apps on its devices, its company policies are said to ban the installation of any government app before the sale of a smartphone.
“Apple has in the past resisted these kinds of requests from authorities,” noted Tarun Pathak, a research director at Counterpoint.
“It’s likely to aim for a middle ground: instead of a mandatory pre-install, they might negotiate and propose an option to prompt users towards installing the application.”
Queries for comment from Apple, Google, Samsung, and Xiaomi went unanswered. India’s telecommunications department also did not respond.
Understanding the IMEI and the Application's Purpose
The IMEI, or International Mobile Equipment Identity, is a 14- to 17-digit number unique to each mobile device. It is primarily used by networks to block network access for phones reported as lost.
The government application is mainly designed to enable users track and locate missing phones across all telecom networks, using a central database. It also allows them to detect, and disconnect, unauthorised mobile connections.
Notable Adoption and Results
With more than 5 million downloads since its inception, the software has reportedly helped block over 3.7 million missing mobile phones. Furthermore, more than 30 million fraudulent connections have also been disconnected through its use.
The government asserts that the app helps preventing cyberthreats and assists in the tracking and disabling of missing phones, thereby aiding police in tracing handsets and keeping counterfeits out of the black market.