Apple resists India’s order to preload cyber safety app

Apple does not plan to comply the Indian government order requiring smartphone makers to preload a state-run cyber safety app.

The mandate, which also applies to Samsung and Xiaomi, directs manufacturers to install the Sanchar Saathi app on new devices and distribute it via software updates to existing phones within 90 days.

The app is designed to track and block stolen phones and prevent misuse, but critics, including opposition politicians and privacy advocates, say it could expand government surveillance over India’s 730 million smartphone users.

Apple plans to raise privacy concerns with officials, but does not plan to challenge the order in court.

The rule aims to combat security threats and reduce scams involving duplicated or blacklisted phones in the country’s large second-hand device market.

🔗 Source: Reuters

🧠 Food for thought

Implications, context, and why it matters.

Order cites Telecom Cyber Security Rules; some enforcement specifics remain unclear

The Department of Telecommunications (DoT) order, issued on November 28, 2025, requires compliance within 90 days 1. It cites the Telecom Cyber Security Rules, 2024 (as amended), as its legal basis 2. Tampering with International Mobile Equipment Identity (IMEI) numbers is a non-bailable offense under the Telecommunications Act 2023, with penalties of up to three years’ imprisonment and fines of up to Rs 5 million (Indian rupees) 1, but public materials do not clarify penalties for non-compliance with the pre-installation directive.
Officials cite the Telecom Cyber Security Rules 2024 and the Telecommunications Act 2023 for action against non-compliance 2. Available sources do not spell out whether DoT can fine firms, halt sales, or block imports. Apple is likely to push back and share privacy and security concerns with Indian officials 3.

Third-party integrators can reduce fraud in India’s secondary device market

India’s second-hand mobile market faces security risks from duplicate IMEIs and resale of blacklisted devices 1. This opens space for resale platforms, insurers, plus mobile device management vendors (software providers that help companies manage employee phones) to use the Central Equipment Identity Register (CEIR) for IMEI checks 4 with lost or stolen device blocking 5. CEIR resources and Sanchar Saathi (a government-run portal and app tied to CEIR) let buyers see if an IMEI is blocked before purchase 1.
Automated checks that verify IMEI status before purchase or policy issuance can help services stand out in India’s refurbished device market. First confirm Application Programming Interface (API) availability and access terms from the Department of Telecommunications, since CEIR currently provides user-facing web services 4.