India requires all new smartphones to include government cybersecurity app Sanchar Saathi

India’s Department of Telecommunications has ordered all new smartphones sold in the country to come pre-installed with the government’s Sanchar Saathi cybersecurity app, which cannot be removed by the user. The directive, passed last week and made public on Monday, gives phone manufacturers 90 days to comply. The app is meant to help citizens check the authenticity of their devices and report stolen or misused phones, as well as suspected telecom fraud. With India being one of the world’s largest mobile markets, hosting over 1.2 billion users, the announcement has sparked widespread privacy concerns.

According to officials, Sanchar Saathi aims to curb the sale of devices with duplicate or spoofed IMEI numbers, which can compromise network security and facilitate phone resales linked to criminal activity. The government claims the app has already aided in recovering more than 700,000 lost phones. However, digital rights groups and cyber experts warn that the app’s extensive permissions could allow intrusive data access, raising fears of state surveillance. The Internet Freedom Foundation described the mandate as transforming every smartphone into a vessel for government software that users cannot control or disable.

Technology analysts have also pointed to potential conflicts with global technology firms’ policies. Apple, for example, traditionally prohibits government or third-party app installations prior to sale and is reportedly planning to challenge the order. Experts argue that while cybersecurity remains a legitimate goal, the lack of transparency about data collection and technical access could erode public trust, echoing similar privacy controversies faced by Russia’s mandatory installation of state-backed software.