The Indian government is pushing for a significant change in the smartphone industry, mandating that all smartphone manufacturers pre-install the state-owned cybersecurity app, Sanchar Saathi, on all new devices sold in the country. This directive, issued by the Department of Telecommunications (DoT) on November 28, gives companies 90 days to comply. The move has sparked debate, raising questions about cybersecurity, user privacy, and government control.
The primary reason cited by the Indian government for this mandate is to combat cyber threats, telecom fraud, and the misuse of mobile devices. The Sanchar Saathi app is designed to help users block and track lost or stolen smartphones across all telecom networks using a central registry. It also allows users to identify and disconnect fraudulent mobile connections and report suspected fraud, spam, and malicious web links. The government has stated the app is essential to address the "serious endangerment" of cybersecurity from duplicate or spoofed International Mobile Equipment Identity (IMEI) numbers, which are exploited to carry out scams and misuse networks.
Since its launch in January 2025, the Sanchar Saathi app has been downloaded over 5 million times and has helped block more than 3.7 million stolen or lost mobile phones and terminate over 30 million fraudulent connections. The app has also aided in the recovery of more than 700,000 lost phones. By pre-installing the app, the government aims to enhance its reach and effectiveness, ensuring that more users are protected from cyber fraud and mobile device misuse.
However, the mandatory pre-installation of Sanchar Saathi has raised concerns among smartphone manufacturers and privacy advocates. One major point of contention is the restriction on users' ability to disable or uninstall the app. This has sparked fears about potential government tracking and surveillance, with some critics likening the move to the use of a "dystopian tool".
Apple, in particular, is expected to resist the mandate, as its policies generally forbid the pre-installation of government or third-party apps. It is speculated that Apple might seek a middle ground, such as offering users an option to install the app rather than pre-installing it. This situation is similar to Russia, where iPhones sold in the country suggest users install government-approved apps during setup, but opting out is possible.
Moreover, the directive requires smartphone companies to push software updates to install the app on devices already in circulation. This means that even existing users will be required to have the Sanchar Saathi app on their phones, further amplifying privacy concerns.
Another concern arising from this mandate is the potential requirement for end-to-end encrypted messaging apps to link to the unique electronic serial number of the SIM. If implemented, services like WhatsApp may need to access the International Mobile Subscriber Identity (IMSI) of SIM cards to verify user identity, which could compromise user privacy.
The Indian government's decision to mandate the pre-installation of the Sanchar Saathi app reflects its commitment to combating cybercrime and protecting its citizens from telecom fraud. However, the move also highlights the ongoing tension between security and privacy, as well as the challenges of balancing government control with user choice in the digital age. As the 90-day deadline approaches, it remains to be seen how smartphone manufacturers will respond and what compromises, if any, will be reached to address the concerns raised by this directive.
