Apple faces a new privacy fight in India

User consent is under threat, at least when it comes to your right to decide what apps to install on your device. That’s because India now wants all smartphone makers to install a government-mandated app on their devices, an app that cannot be deleted. It’s yet another privacy-related struggle for Apple — and for all of us. 

What happened? India’s Ministry of Communications last week privately demanded that manufacturers pre-install India’s Sanchar Saathi app on mobile devices within just 90 days. The demand doesn’t only affect smartphones intended for sale in India, as manufacturers will also be forced to install the app on older devices through a future software update.

India, Apple, and Google have been discussing these plans all year, and it is noteworthy that the demand so far has only been shared privately. (India is also one of those governments to have demanded pre-screening of operating system updates.)

What is the Sanchar Saathi app?

India’s Department of Telecommunications says the app helps prevent duplication and spoofing of IMEI numbers, which helps protect against scams and fraud and helps track stolen/counterfeit devices. IMEI numbers are 14 to 17 digits long and can be used to cut off network access.

The app, which is also available as a web portal, lets you: 

Report suspected fraudulent communication.

Report unsolicited commercial communications and spam.

Track your lost or stolen device, mobile connections, and ISP.

Block a lost or stolen device and monitor mobile connections in your name.

Verify whether an incoming call or a contact being called belongs to an authentic source to protect against fraud.

The app has been downloaded 5 million times since January, according to the government, which says it has been used to recover more than 700,000 lost devices. The app uses a central registrar accessed by the networks, which can also be used to turn off network access. 

What will Apple do?

Apple has resisted similar attempts to pre-install government-mandated apps in the past, so is likely to do so again. That’s because the company understands that once you permit one government to install apps on devices, every government will do the same – and since these apps aren’t necessarily designed within Apple’s own privacy and security guidelines, they might be unsafe. This raises the specter of state surveillance being just one app install away.

Speaking to Reuters, Internet advocacy lawyer Mishi Choudhary said the demand “effectively removes user consent as a meaningful choice.”

It is worth notingthat while Apple will resist government attempts to chip away at the privacy and security of its platforms, the company remains subject to the law. That is why it may already have created a backdoor vulnerability in the iPhone to meet demands made by the rogue UK government, and it’s why in China it ensures iCloud data is stored on locally-based servers. Ultimately, and perhaps, sadly, if people want to oppose creeping state surveillance, they have to be willing to oppose it themselves in the political sphere, rather than relying on private companies to fight on their behalf. Apple, like anyone else, must act within the law, even when the law is foolish, dangerous, or misconstrued.

India’s demand must be weighed up beside the country’s second demand: that all encrypted messaging apps link to the unique SIM serial number, further eroding privacy.

What could happen?

The company does have some power to bring to the table. It’s manufacturing investment in India is generating significant economic benefits and the nation is unlikely to see Apple’s interest fade in extending those investments.

It is possible that as discussions move forward, Apple might persuade the government to abandon demands for mandatory installation of the app in favor of a prominent nudge screen when users first update an existing device or start using a new one. Doing so would, at least, support the notion of free choice.

You can follow me on social media! Join me on BlueSky,  LinkedIn, and Mastodon.