India Orders Mandatory Cybersecurity App on All New Smartphones - New Rule Sparks Privacy Concerns Nationwide
Government Issues New Order for Smartphone Manufacturers
India has directed all smartphone makers to pre-install the government-run Sanchar Saathi app on every new device sold in the country—an order passed last week and made public on Monday. The decision has triggered a nationwide debate over user privacy, surveillance risks and the future of digital governance in one of the world’s largest smartphone markets, with over 1.2 billion mobile users.
Under the new rule, manufacturers have 90 days to comply. The notification specifies that the app’s functionalities “cannot be disabled or restricted”, making it mandatory for all new smartphones to display the app prominently during setup.
The Sanchar Saathi platform, introduced earlier this year, allows users to verify IMEI numbers, report lost or stolen phones and flag suspected telecom fraud.
Why the Government Says the App Is Necessary
According to the Department of Telecommunications (DoT), the directive aims to enhance telecom cybersecurity, curb the circulation of duplicate IMEI devices and protect citizens from fraudulent phone activities.
The DoT stated that India’s vast second-hand mobile device market has seen stolen or blacklisted phones being resold, placing buyers at legal and financial risk.
“Cases have been observed where stolen or blacklisted devices are being re-sold, making the purchaser an abetter in crime,” the department said.
A Reuters report citing official data said the app has already helped recover over 700,000 lost or stolen phones nationwide, including 50,000 in October alone.
Under the new rules, companies must also “make an endeavour” to push the app via software updates on devices already manufactured but not yet sold. A compliance report must be filed within 120 days.
Criticism Over Privacy and Surveillance Fears
Cybersecurity experts, digital rights organisations and analysts have raised concerns over the app’s extensive permission requirements. According to its privacy policy, Sanchar Saathi can:
- Make and manage phone calls
- Send SMS messages
- Access call logs and SMS logs
- Access photos, media and device storage
- Use the phone’s camera
Digital rights advocacy group Internet Freedom Foundation (IFF) warned that the directive could compromise user autonomy.
“This converts every smartphone sold in India into a vessel for state-mandated software that the user cannot meaningfully refuse, control or remove,” IFF said.
Technology analyst Prasanto K. Roy echoed similar concerns.
“We can’t see exactly what it’s doing, but we can see it’s asking for a great deal of permissions—potential access to almost everything on the handset. This is worrying,” he told the BBC.
Although the app claims on Google Play Store that it does not collect or share user data, experts argue that its access permissions widen the scope for potential surveillance.
Government Responds After Public Backlash
Facing rising criticism, Union Communications Minister Jyotiraditya Scindia clarified that using the app is voluntary and that users will be able to delete it.
“This is a completely voluntary and democratic system… users may choose to activate the app or delete it anytime,” he wrote on X.
However, the minister did not explain how deletion would be possible if the order also states that the app’s core functionalities “cannot be disabled or restricted.” This contradiction has further intensified the public debate.
Industry Reaction and Compliance Challenges
Smartphone makers now face uncertain compliance requirements, as many global companies prohibit preinstallation of third-party apps on factory devices.
Roy highlighted the problem:
“Most companies prohibit installation of government or third-party apps before sale. Compliance will be extremely difficult.”
India's smartphone market is dominated by Android devices, but Apple’s iOS accounts for roughly 4.5% of the country’s 735 million smartphones as of mid-2025. Reuters reported that Apple does not intend to comply and will raise its concerns with the central government.
The order may therefore set up a regulatory confrontation between New Delhi and global technology manufacturers.
International Precedents and Global Context
India’s move follows similar mandates in other countries. In August 2025, Russia required all smartphones and tablets sold in the country to come pre-installed with the state-backed MAX messenger app, prompting widespread public criticism over data privacy and government monitoring.
Digital rights groups warn that such requirements could normalise state control over device ecosystems worldwide.
What the Sanchar Saathi App Does
The government built Sanchar Saathi to address four key concerns:
- Fraudulent or duplicate IMEI numbers
- Lost or stolen phone tracking
- Misuse of telecom services
- Fraudulent messaging and calls
The IMEI verification feature is central to the app’s purpose. The 15-digit IMEI code serves as a device’s unique identity on mobile networks. According to the DoT, duplicate IMEIs pose a major risk to cyber safety and hinder law enforcement operations.
Why the Policy Matters for Consumers and Industry
The directive could reshape India’s smartphone ecosystem in several ways:
Impact on Users
- Potential risk of excessive data access
- Possible inability to disable or uninstall the app
- Concerns over long-term privacy implications
Impact on Manufacturers
- Adjustments to global compliance policies
- Possible pushback from Apple and select Android OEMs
- Increased regulatory scrutiny
Impact on National Security
- Reduction in fraud linked to duplicate IMEIs
- Strengthening telecom monitoring capabilities
- Greater oversight of second-hand mobile markets
Conclusion
India’s decision to mandate the Sanchar Saathi app represents one of the most significant digital governance shifts in recent years. While the government insists the move is aimed at improving cybersecurity and protecting consumers, experts warn that the broad permissions and limitations on disabling the app raise serious questions about privacy, surveillance and lawful user control.
With smartphone makers expected to comply within three months, and global players yet to respond fully, the directive may have far-reaching consequences for India’s digital privacy landscape.
Final Thoughts from TheTrendingPeople
The debate around Sanchar Saathi shows India’s struggle to balance national security with individual privacy rights. As companies prepare their compliance plans and users await clarity on whether the app can truly be removed, this decision marks a turning point for how technology, policy and personal freedom intersect in the world’s fastest-growing digital market.