India Orders Phone Producers to Preload Devices with National Cybersecurity Application
In a notable step, India's telecoms authority has discreetly directed smartphone companies to preload all new devices with a national cybersecurity application that must remain installed. This mandate, which has come to light, is set to antagonise leading tech firms like Apple and prompt concerns among consumer watchdogs.
A Worldwide Shift in Cybersecurity Regulation
In tackling a rising tide of cybercrime and device misuse, India is joining regulators worldwide. This move mirrors comparable regulations introduced in countries like Russia, which aim to curb the use of stolen phones for illicit activities and promote official applications.
What Manufacturers Are Impacted by the Order?
The latest directive binds key mobile phone companies operating in the domestic market. This encompasses Apple, which has in the past locked horns with the telecom authority over comparable apps, as well as giants like Samsung, Vivo, Oppo, and Xiaomi.
Specifics of the Government Order
An order dated 28 November provides smartphone companies a three-month deadline to ensure that the official Sanchar Saathi application is factory-loaded on all new devices. A key provision is that owners are prevented from deleting the app.
For phones already in the retail pipeline, companies are required to push the app via system updates. It is important that this order was sent confidentially and was sent privately to select firms.
Privacy Apprehensions Expressed
However, technology analysts have flagged significant apprehensions regarding this decision. A legal expert specialising in tech law stated that India's directive is a worrying development.
“The government in essence erodes user consent as a real choice,” said Mishi Choudhary, an expert working on internet rights issues.
Consumer organisations had earlier condemned a comparable mandate by Russia in August for a government-sponsored communication called Max to be pre-installed on phones.
The Scope of the Indian Market
India, one of the world's biggest mobile markets, boasts over 1.2 billion connections. Official figures reveal that the cybersecurity application, introduced in January, has reportedly helped tracking down more than 700,000 lost phones, with around 50,000 recovered in October by itself.
The government argues that the tool is vital to combat the “serious endangerment” of telecom cybersecurity from cloned or tampered IMEI numbers, which are used for fraud and network misuse.
Apple's Stance
Apple's iOS powers an estimated 4.5% of the 735 million mobile phones in India, with the rest using Android, as per market research. While Apple includes its own first-party apps on its devices, its company guidelines reportedly forbid the installation of any government application before the purchase of a device.
“Apple has traditionally declined these kinds of requests from governments,” commented Tarun Pathak, a analyst at Counterpoint.
“It’s expected to pursue a negotiated solution: instead of a mandatory pre-install, they might discuss and ask for an alternative to nudge users towards downloading the app.”
Requests for response from Apple, Google, Samsung, and Xiaomi went unresponded. India’s telecommunications ministry also remained silent.
Understanding the IMEI and the Application's Purpose
The IMEI, or International Mobile Equipment Identity, is a unique identification number assigned to each handset. It is primarily used by networks to block network access for phones flagged as stolen.
The Sanchar Saathi app is chiefly designed to enable users block and track missing phones across all telecom networks, using a national database. It also allows them to identify, and block, illegal mobile connections.
Notable Usage and Outcomes
With more than 5 million installs since its launch, the software has reportedly been used to disable more than 3.7 million stolen or lost mobile phones. Furthermore, over 30 million illegal connections have also been disconnected through its use.
The government claims that the software aids in combating cyberthreats and helps in the tracking and blocking of lost or stolen phones, thereby helping police in tracing handsets and keeping cloned devices out of the illicit trade.