NEW DELHI, Dec 2 (Reuters) – India’s mandate requiring smartphone makers to preload a state-owned cyber safety app on all new devices has triggered a political firestorm, fanning fears of government snooping in the world’s most populous nation.The app, called Sanchar Saathi, or Communication Partner, is at the center of a storm involving Apple (AAPL.O), opens new tab, Samsung (005930.KS), opens new tab, Xiaomi (1810.HK), opens new tab and other major technology firms. They have been given 90 days to comply.

Sign up here.

WHAT DOES THE APP OFFER?

Currently available in Apple and Android app stores, Sanchar Saathi is billed as a citizen-centric safety tool.

It allows users to block and track lost or stolen mobile phones using the device’s International Mobile Equipment Identity (IMEI), which is a unique code for the handset.

It also enables users to check how many mobile connections are registered under their name, helping to identify and disconnect fraudulent numbers used in scams.

Additional features include tools to report suspected fraudulent calls and verify the authenticity of used devices before purchase.

WHAT’S THE NEW MANDATE?

On November 28, India’s telecom ministry privately asked all smartphone manufacturers to preload their new devices with the app, stating that it must be “visible, functional, and enabled” upon first setup. Reuters was first to report on the move on Monday.

It also says manufacturers must ensure that users cannot disable or restrict the app’s features.

For devices that are already manufactured, companies must install the app via software updates.

An industry source with direct knowledge of the situation said software updates would eventually roll out the app to existing phone users, meaning it could reach more than 735 million people.

The government has said the mandate is essential to combat the “serious endangerment” of telecom cyber security caused by IMEI tampering.

SANCHAR SAATHI IN NUMBERS, DATA COLLECTION

The Indian government says the app has been downloaded over 10 million times and the system has helped block over 4.2 million stolen or lost phones, in addition to terminating more than 30 million fraudulent mobile connections.

The government says the app “does not automatically capture any specific personal information from you without intimation on the application.”

Its privacy policy says users will be asked to share permission for sharing access to cameras, photos and files for iPhones – for select uses.

For Android, users will be asked to share call logs, send messages for registration, make and manage phone calls “to detect mobile numbers in your phone,” as well as grant access to cameras and photos.

Apple is worried about its privacy and security vulnerabilities, Reuters has reported. According to Counterpoint Research, more than 95% of Indian smartphones run on Google’s Android, with the remainder on Apple’s iOS.GOVERNMENT LOGIC; PUBLIC, POLITICAL RESPONSE

The Indian government says criminals often clone or spoof valid IMEI numbers onto stolen devices, making it impossible to track criminals or block hardware.

India, which has a large market for used phones, also wants to prevent people from buying stolen or blacklisted devices.

The mandate has since become a talking point on local prime-time television and social media, drawing sharp criticism from privacy advocates and members of the political opposition.

The main opposition Congress Party has demanded that the mandate be rolled back, calling the move unconstitutional.

The Internet Freedom Foundation, a free-speech rights group, said on X that it would “fight this direction till it is rescinded.”

Reporting by Arpan Chaturvedi and Munsif Vengattil; Editing by Aditya Kalra and Thomas Derpinghaus

Our Standards: The Thomson Reuters Trust Principles., opens new tab

Purchase Licensing Rights

Arpan is a correspondent for Reuters based in New Delhi, where he reports from the courts in India. He joined Reuters in 2022, and has been a part of the companies coverage team reporting on court cases spanning aviation, mining, human rights and other public interest issues.

Based in Bengaluru, Munsif Vengattil leads Reuters’ technology news coverage in India. He tracks themes at the intersection of tech, business, and labor.
A reporter for nine years, Munsif has written extensively on India’s electronics manufacturing aspirations and its tech policy space, AI and election interference, satellite internet, streaming wars, and data breaches. His stories also focus on investigating corporate strategies and revealing India-specific initiatives and challenges of the biggest of tech firms – from Apple, Facebook, and Google, to Foxconn, Samsung, and Nvidia.