India mandates pre-installation of government cyber safety app on all smartphones

India’s telecommunications ministry has issued a sweeping directive requiring all smartphone manufacturers to pre-install the government-developed ‘Sanchar Saathi’ cybersecurity application on new devices. The mandate, announced Monday, gives device makers a 90-day compliance window and explicitly prohibits users from uninstalling the application. Additionally, the order extends to existing smartphones through mandatory software updates, significantly expanding the regulation’s reach beyond new market offerings.

The Ministry of Communications justified the measure as essential protection for India’s 1.2 billion mobile users against cyber fraud and telecommunications security threats. Official data indicates the application, launched in January, has already facilitated the recovery of over 700,000 lost devices and garnered more than 5 million downloads since its introduction.

However, digital privacy advocates have raised substantial concerns regarding user consent and potential surveillance implications. Nikhil Pahwa, founder of technology policy platform MediaNama, characterized the move as governmental ‘testing of waters’ that could pave the way for more intrusive applications. ‘Once a government app is forcibly pre-installed on our devices, what prevents future implementations that might enable surveillance?’ Pahwa questioned, emphasizing that smartphones represent personal spaces where users traditionally maintain choice over content.

The directive is anticipated to encounter significant opposition from international smartphone manufacturers, particularly U.S.-based Apple, whose established policies prohibit pre-installation of third-party applications, including those mandated by governments. This development aligns with similar initiatives observed in other nations, including Russia’s requirement for pre-installed MAX messaging service, which critics identify as possessing surveillance capabilities.