Government reverses mandate after backlash
India’s government has formally rescinded its directive requiring all smartphones sold in the country to come with a pre‑installed state‑owned cybersecurity app, following an intense wave of criticism from privacy advocates, opposition politicians and global tech companies.
On 3 December 2025, the Sanchar Saathi (meaning “Communication Partner”) policy — first communicated privately to manufacturers days earlier — was withdrawn. The Ministry of Communications announced that pre‑installation will no longer be mandatory for mobile device makers.
What was the plan — and why it sparked alarm
The original order, circulated on 28 November, required phone makers — including major brands such as Apple, Samsung, Xiaomi, Vivo and others — to ensure that new smartphones sold in India came with Sanchar Saathi pre-installed. The directive also stipulated the app “must not be disabled or restricted.”
According to the government, the app’s intended purpose was to help users block or track lost or stolen devices, and to combat fraud related to duplicate or spoofed IMEI numbers — a growing concern in India’s large telecom market of over 1.2 billion subscribers.
But critics argued the measure stripped users of consent and risked turning phones into state‑controlled devices. Legal and digital‑rights experts warned that embedding a non-removable state app with privileged system access could pave the way for government surveillance or misuse.
Who pushed back — tech firms, privacy advocates and politicians
The backlash was swift. Tech giants like Apple reportedly said they would refuse to comply, citing their internal policies against pre‑installing third‑party (especially government) system apps.
Opposition political leaders also raised alarm. MPs condemned the order as a threat to citizens’ privacy and basic freedom, with one opposition politician warning it could turn every smartphone “into a brick” if used as a “kill switch.”
Digital‑rights organisations described the mandate as a dangerous overreach — arguing that once such an app is embedded at the system level, future updates could repurpose it to monitor or control device behaviour under the guise of security.
What Sanchar Saathi is — and was supposed to do
Sanchar Saathi launched in 2023 as a portal under the government’s telecom regulator. Its tools allow users to:
- Block or track lost or stolen phones via their IMEI number;
- Report fraudulent or suspicious mobile connections;
- Help authenticate devices and SIM registrations to curb fraud or illegal network use.
By the government’s own account, the app helped block or recover a substantial number of lost devices and cut down fraudulent connections — a record that officials used to justify the 2025 pre‑installation mandate.
But the key point of contention remained: the plan would have transformed a voluntary cyber‑security tool into a mandatory, pre-installed system component — one that users couldn’t opt out of. That, critics argued, undermined user autonomy and privacy rights.
Why the reversal matters — and what remains unresolved
The reversal marks a rare policy U‑turn for the current administration — a signal that even sweeping state‑led digital security measures can be challenged when they clash with public privacy concerns and corporate resistance.
Supporters of digital rights welcomed the decision as a vindication of citizen consent and data protection. The Internet Freedom Foundation, among others, called the move a “welcome first step,” but urged watchdogs to wait for the formal legal withdrawal before declaring the issue closed.
Yet questions remain:
- Will the government reintroduce a revised mandate under a different form or lesser terms?
- What safeguards exist to ensure that Sanchar Saathi, or similar apps, remain optional rather than mandatory in the future?
- How will this affect trust between citizens, government, and technology firms — especially in a country increasingly focused on digital governance and surveillance concerns?
Broader lessons — trust, consent and digital governance
The episode highlights the tension between efforts to boost cybersecurity and the imperative to protect personal privacy in democratic societies. In pushing for mass pre-installation of a government app, India raised the stakes — asking citizens to trade consent for security, without broad consultation.
The swift reversal suggests that public opinion, industry pushback, and democratic checks can still act as effective brakes on policies perceived as intrusive. But maintaining that balance will require ongoing vigilance, transparency, and clear legal frameworks — especially as governments worldwide explore deeper control over digital infrastructure.
