India’s proposed smartphone security rules spark alarm across global tech industry

What happened: India has proposed sweeping new smartphone security rules that would require deeper government oversight of phone software and app permissions.

Why it matters now: Major global brands including Apple, Samsung, Google, and Xiaomi warn the rules could clash with corporate secrecy and global privacy standards.

What changes for people: Phones sold in India could face stricter app controls, visible alerts for sensitive permissions, and possible delays in new software features.

Who is affected: Smartphone makers, app developers, Indian consumers, and the country’s fast-growing digital ecosystem.

India is preparing to tighten control over smartphone security in one of the world’s largest mobile markets, a move that has triggered strong resistance from global technology companies. The proposed rules, now under discussion in New Delhi, could fundamentally reshape how phone software is tested, approved, and monitored in the country.

Source code access raises red flags

One of the most contentious proposals would require smartphone manufacturers to submit proprietary source code for testing at government-designated laboratories. The goal, according to officials familiar with the plan, is to identify vulnerabilities in operating systems that hackers or hostile actors could exploit.

Industry representatives argue this requirement is unworkable. The Mobile and Electronics Association of India (MAIT), which represents Apple, Samsung, Google, and Xiaomi, has told authorities that sharing source code is not possible due to corporate confidentiality obligations and global user privacy commitments.

Executives warn that opening core operating system code, even to approved labs, could increase the risk of leaks and undermine trust in secure devices.

Tighter limits on app permissions

Another key element of the proposal targets how apps access sensitive phone features. Under the draft rules, apps would be barred from using cameras, microphones, or location services in the background when a phone is inactive.

In addition, phones would be required to display continuous status bar notifications whenever these permissions are active, making surveillance or data collection more visible to users.

Policy experts say this could strengthen consumer awareness but may also disrupt popular services such as navigation, fitness tracking, and voice assistants.

Why the government is pushing ahead

Indian officials argue the measures are necessary to improve national cybersecurity, reduce the risk of foreign surveillance, and protect citizens as smartphones become central to payments, identity, and governance services.

With India positioning itself as a global manufacturing and digital hub, authorities see tighter security rules as a strategic safeguard rather than a regulatory burden.