India mandates non-removable cyber security app on all new phones, Apple likely to push back

India's telecoms ministry has privately asked smartphone makers to preload all new devices with a state-owned cyber security app that cannot be deleted, a government order showed, a move likely to antagonise Apple and privacy advocates.

In tackling a recent surge of cyber crime and hacking, India is joining authorities worldwide, most recently in Russia, to frame rules blocking the use of stolen phones for fraud or promoting state-backed government service apps.

Apple, which has previously locked horns with the telecoms regulator over development of a government anti-spam mobile app, is among the companies, such as Samsung, Vivo, Oppo and Xiaomi bound by the new order.

The November 28 order, seen by Reuters, gives major smartphone companies 90 days to ensure that the government's Sanchar Saathi app is pre-installed on new mobile phones, with a provision that users cannot disable it.

For devices already in the supply chain, manufacturers should push the app to phones via software updates, the ministry said in its order, which was not made public and was sent privately to select companies.

A lawyer specialising in technology matters said India's move was cause for concern, however.

"The government effectively removes user consent as a meaningful choice," said Mishi Choudhary, who works on internet advocacy issues.

Have thoughts about this topic? Others do, too. Join them in the discussion.

Privacy advocates criticised a similar requirement by Russia in August for a state-backed messenger app called MAX to be pre-installed on phones.

One of the world's largest telephone markets, India has more than 1.2 billion subscribers, and government figures show the app, launched in January, has helped recover more than 700,000 lost phones, including 50,000 in October alone.

Apple often refuses such requests

The government said the app was essential to combat "serious endangerment" of telecom cyber security from duplicate or spoofed IMEI numbers, which enable scams and network misuse.

Apple's iOS powered an estimated 4.5% of 735 million smartphones in India by mid-2025, with the rest using Android, Counterpoint Research says.

While Apple pre-installs its own proprietary apps on phones, its internal policies prohibit installation of any government or third-party app before sale of a smartphone, a source with direct knowledge of the matter said.

"Apple has historically refused such requests from governments," said Tarun Pathak, a research director at Counterpoint.

"It's likely to seek a middle ground: instead of a mandatory pre-install, they might negotiate and ask for an option to nudge users towards installing the app."

Apple, Google, Samsung and Xiaomi did not respond to requests for comment. India's telecoms ministry also did not respond.

A 14- to 17-digit number unique to each handset, the IMEI, or International Mobile Equipment Identity, is most commonly used to cut off network access for phones reported to have been stolen.

The app is mainly designed to help users block and track lost or stolen smartphones across all telecom networks, using a central registry. It also lets them identify, and disconnect, fraudulent mobile connections.

With more than 5 million downloads since its launch, the app has helped block more than 3.7 million stolen or lost mobile phones, while more than 30 million fraudulent connections have also been terminated.

The government says it helps prevent cyber threats and assists tracking and blocking of lost or stolen phones, helping police to trace devices, while keeping counterfeits out of the black market.

Unlock more exclusive Cybernews content on YouTube.