India has mandated that all new smartphones come pre-loaded with a non-removable state-run cybersecurity app, sparking privacy concerns among users. Announced last week but revealed publicly on Monday, this order requires smartphone manufacturers to ensure the Sanchar Saathi app is included in all new devices within a 90-day timeframe.
The app is designed to help individuals verify the authenticity of mobile devices and report potential misuse of telecom resources. However, this move has faced critiques from cybersecurity experts, who argue that it infringes on citizens' privacy.
The Sanchar Saathi app, launched in January, allows users to check a device's International Mobile Equipment Identity (IMEI), report lost or stolen phones, and flag suspected fraud communications. The Indian government asserts that duplicate or spoofed IMEI numbers pose significant security risks and contribute to a thriving second-hand market for stolen devices.
All smartphone manufacturers must ensure that the app is easily accessible and visible during device setup, and its functionalities cannot be disabled. Additionally, they are urged to push the app as a software update for unsold devices in inventory.
The government's Department of Telecommunications claims that such measures are crucial for enhancing telecom cybersecurity. Reports indicate that the app has successfully aided in the recovery of over 700,000 lost devices, including 50,000 last month.
Despite these assertions, concerns persist regarding the app's extensive permissions, which could widen the scope for surveillance. Advocacy group Internet Freedom Foundation has criticized the mandatory installation as transforming smartphones into tools for state surveillance without user consent.
Experts like Prasanto K Roy have highlighted potential issues related to the level of access the app may eventually receive on devices, questioning how comprehensive its data collection capabilities could be. With Apple historically resisting similar government demands, its compliance with this new order remains uncertain, setting up a notable friction between user privacy and governmental regulations in India's large mobile market.


















