India Orders Mandatory Preloading of Cyber Safety App on All New Smartphones

Bengaluru – India has issued a confidential directive requiring smartphone manufacturers to preload a government-developed cyber safety application on all new devices.

The order represents a significant shift in the country’s approach to digital security and device regulation, as authorities respond to rising cases of cyber fraud, online impersonation, and theft involving mobile phones across national networks.

The instruction, dated November 28, gives manufacturers 90 days to ensure the Sanchar Saathi app is embedded on every new smartphone sold in the Indian market.

The app cannot be deleted by users, and it is designed to detect fraudulent activity, verify device authenticity, and help consumers block stolen phones or unauthorized mobile numbers.

The move comes amid a marked increase in cybercrime cases, prompting policymakers to adopt stronger tools for monitoring and protection.

The directive also covers devices already within the supply chain. Companies have been asked to push the app to existing units through software updates, ensuring broad and immediate adoption.

The order was circulated privately to select smartphone makers, reinforcing the government’s cautious approach as it prepares for potential industry resistance and public debate on data rights and device control.

The requirement affects major global brands including Apple, Samsung, Vivo, Oppo, and Xiaomi. These companies dominate India’s fast-growing smartphone ecosystem, where more than 1.2 billion telecom subscribers rely on mobile devices for communication, digital payments, and identity-linked services.

Any regulatory shift affecting device software or network interaction is therefore expected to have far-reaching operational and commercial implications.

Government officials argue that Sanchar Saathi is essential for national security and consumer protection. They say the platform has helped trace and block millions of fraudulent mobile connections and recover hundreds of thousands of stolen devices this year.

Authorities believe the application strengthens the country’s ability to respond to identity-based scams and to detect misuse of the IMEI system, the unique identification number assigned to every mobile phone.

Privacy experts, however, have signalled concerns about the compulsory nature of the directive.

They warn that making a non-removable government application mandatory raises questions about consent, user autonomy, and the scope of monitoring.

Similar rules implemented in other jurisdictions have sparked debates over state access to digital tools and the need for transparent safeguards in data governance.

Industry analysts say implementation may be particularly complex for companies with strict internal policies.

Apple, for instance, typically prohibits the pre-installation of third-party or government applications on its devices before sale, prioritising uniform global privacy and security standards.

Experts predict that the company may seek alternative solutions such as optional installation prompts or user-triggered downloads to comply without compromising its established ecosystem rules.

The telecom ministry has not publicly responded to questions about how the directive was formulated or how compliance will be monitored.

Smartphone makers also did not comment on whether they intend to follow the directive as written or challenge it through legal or policy channels.

The lack of public disclosure has further heightened anticipation around industry responses and potential legal scrutiny.

Central to the government’s reasoning is the risk posed by cloned or spoofed IMEI numbers, which allow criminals to bypass network checks and conceal illicit activities.

Authorities say mandatory integration of the cyber safety app will improve monitoring, block stolen or counterfeit devices, and help police coordinate investigations across states.

They argue that the benefits outweigh concerns about pre-installation, describing the measure as part of a broader national strategy to strengthen cybersecurity.

Sanchar Saathi offers features that allow users to track, block, or deregister lost devices, verify active mobile connections linked to their identity, and prevent unauthorized usage across telecom networks.

The platform relies on a national registry and coordination with service providers, making it one of the most extensive digital safety initiatives introduced in India.

The order marks a turning point in India’s digital governance efforts as it seeks to protect consumers amid growing dependence on mobile technology.

Over the coming months, the reactions of manufacturers will shape the policy’s rollout and determine its long-term impact on user rights, device standards, and India’s wider technology landscape.