The Indian government has mandated that all mobile phone manufacturers pre-install the Sanchar Saathi app on new devices and update it on existing phones within a 90-day timeframe. Companies such as Apple, Samsung, and Xiaomi must comply with this directive and provide reports within 120 days. This decision has sparked discussions on social media regarding privacy concerns and government supervision.
The government emphasizes that the purpose of this directive is to protect users. According to the official press note from PIB, the Department of Telecommunications (DoT) issued these instructions to prevent the purchase of counterfeit handsets, facilitate the reporting of potential misuse of telecom services, and enhance the effectiveness of the Sanchar Saathi initiative.
While the notification highlights security reasons, the notion of a government app that cannot be uninstalled or deactivated raises questions. The debate revolves around balancing cybersecurity needs like preventing phone theft and fraud with user privacy. Comparatively, democratic countries like the USA do not impose mandatory government apps on smartphones; instead, they employ protocols like STIR/SHAKEN to combat call spoofing.
In the UK, the focus is on the Online Safety Act 2023, which places responsibility on tech companies to prevent fraudulent content. The European Union prioritizes data protection and cybersecurity, ensuring that devices sold in the region are secure and receive regular security updates. Singapore offers a voluntary scam-checking app, while South Korea’s past experience with a mandatory app for minors faced scrutiny and was ultimately withdrawn due to security flaws.
Most democracies opt for other strategies, such as active government agencies combating cybercrime in the US and stringent regulations for phone makers in the EU. Russia stands out as an example of a government mandating specific apps on devices, including a government ID app and a new messaging app. This approach differs from the practices of democracies and raises unique considerations for user privacy and government oversight.