India Mandates Pre-Installed Government App on Smartphones

India has mandated that smartphone manufacturers pre-install a government-run cybersecurity app, called Sanchar Saathi, on all new devices. Effective immediately, this order requires compliance within 90 days and has sparked significant concerns regarding user privacy. With over 1.16 billion mobile phone users in the country, the government asserts that the app will enhance protections against fraud and other risks.

The announcement, made late on Monday, specifies that the app must be “readily visible and accessible” to users upon initial setup and that its functionalities cannot be disabled. The government claims that Sanchar Saathi is designed to help users track lost or stolen phones and identify fake mobile subscriptions made in their names. According to official figures, the app has already traced more than 2.6 million phones.

Concerns Over Privacy and Surveillance

Despite the stated intentions, civil rights advocates have raised alarms about the implications of this directive. The Internet Freedom Foundation (IFF) expressed significant concern, stating that the order represents “a sharp and deeply worrying expansion of executive control” over personal devices. In a statement released on X, the organization argued that this move essentially grants the state an open-ended surveillance capability on users’ primary personal devices, lacking the essential safeguards expected in a constitutional democracy.

Cybersecurity analyst Nikhil Pahwa further criticized the directive, asserting that it constitutes a clear invasion of privacy. “How do we know this app isn’t used to access files and messaging on our device, which is unencrypted?” he questioned, highlighting the potential for misuse.

Opposition from within India’s political landscape is also vocal. Members of the Congress party, led by politician KC Venugopal, have called for an immediate rollback of the order, deeming it unconstitutional. Venugopal emphasized the dangers of a government app that cannot be uninstalled, labeling it a “dystopian tool” for monitoring citizens.

International Context and Comparisons

This development in India mirrors similar actions taken by other nations. In August, Russia implemented a directive requiring manufacturers to include a government messaging platform called Max on all new phones and tablets, raising similar concerns among rights advocates regarding potential surveillance capabilities.

As this situation unfolds, the implications for user privacy and digital rights in India will be closely scrutinized. The government’s push for enhanced cybersecurity measures is undoubtedly critical, yet the balance between safety and privacy remains a contentious issue.