India Drops Mandatory Cybersecurity App Order After Surveillance Backlash

Government walks back directive requiring all new smartphones to carry non-removable Sanchar Saathi app

In a major reversal, the Indian government on Wednesday withdrew its controversial directive that would have forced smartphone manufacturers to pre-install a state-developed cybersecurity application on all new devices. The rollback comes amid mounting criticism from political parties, civil society groups, privacy advocates and global technology firms that warned the move could expand state surveillance and undermine user privacy.

---

A Quiet Order That Triggered Loud Pushback

According to multiple industry sources, the government had privately informed major smartphone makers — including Apple, Samsung, and Xiaomi — on November 28 that all new smartphones sold in India must come preloaded with Sanchar Saathi, an anti-theft and fraud-prevention app developed by the Department of Telecommunications.
The directive also required that the app be non-removable, drawing immediate comparisons to invasive digital monitoring tools.

The plan became public earlier this week following a Reuters report, sparking a wave of opposition.

On Wednesday, the Ministry of Communications issued a concise statement:
“The Government has decided not to make the pre-installation mandatory for mobile manufacturers.”

This marked a complete U-turn from the previous day, when ministers had publicly defended the order as a necessary step to curb cyber fraud.

---

Political Pressure and Privacy Concerns

Opposition leaders seized on the controversy, questioning the legal basis for forcing citizens to use software they cannot delete.
Senior Congress MP Randeep Singh Surjewala, in a notice submitted to Parliament, demanded clarity on the authority used to mandate such an app. He warned that any compulsory, non-removable tool could potentially house “backdoor capabilities,” creating risks for personal data and user autonomy.

Newspaper editorials and digital rights groups echoed these concerns, noting that pre-installed software remains one of the most opaque areas of mobile security worldwide.

Tech lawyer Mishi Choudhary, who has worked extensively on internet governance issues, said the episode highlights a deeper problem:
India’s regulatory climate, she argued, often shifts abruptly, creating challenges for global firms that require stability to operate.
“This is a welcome rollback,” she said, “but arbitrary policy decisions without thorough analysis of what genuinely reduces cybercrime remain troubling.”

---

Tension With Smartphone Makers

The government also faced resistance from within the industry. Sources told Reuters that Apple and Samsung were preparing not to comply with the directive, citing both technical and privacy complications.
Manufacturers were reportedly concerned about the precedent of embedding undeletable government software at the system level — something rarely seen outside highly controlled digital markets.

The only comparable case cited by industry observers was Russia’s 2024 mandate requiring all mobile devices to pre-install MAX, a state-backed messaging platform that critics said increased the government’s ability to track user communications.

---

Government’s Explanation and App Adoption Surge

Officials defended Sanchar Saathi as a consumer-protection tool designed to help users trace and block stolen or lost phones, as well as disable devices involved in fraud.
On Wednesday, the government insisted the rollback was not a response to political pressure but rather a reflection of the app’s growing voluntary adoption. It claimed that 600,000 people downloaded Sanchar Saathi in the 24 hours following the controversy.

“The app is secure and meant to shield citizens from cybercriminals,” the ministry said.

---

A Pattern of Backtracks

This is not the first time New Delhi has reversed a major tech policy following public and corporate pushback.
In 2023, the government abandoned a proposed licensing regime for laptop imports after protests from U.S. officials and technology companies.
Similarly, during the COVID-19 pandemic in 2020, the mandatory use of the government’s Aarogya Setu contact-tracing app for office workers was eased to a recommendation after privacy groups raised alarms.

Together, these episodes have intensified broader debates about digital rights, surveillance, and the balance between national security and personal freedoms in one of the world’s fastest-growing technology markets.

---

What Comes Next

While the Sanchar Saathi requirement has been shelved for now, experts expect renewed discussions on how India should regulate mobile security without compromising user autonomy.
The incident underscores a recurring challenge for the government: designing cyber-safety frameworks that protect citizens while maintaining trust among global investors, rights groups and smartphone users.

As digital fraud rises nationwide, the tension between state intervention and privacy is likely to remain at the center of India’s technology policy debates.