Cyber Security News

India Mandates ‘Undeletable’ Government Cybersecurity App for All Smartphones

India’s Department of Telecommunications (DoT) has ordered smartphone manufacturers to preload a government-backed cybersecurity app, “Sanchar Saathi,” on all new devices sold in the country.

The order, issued privately on November 28, 2025, gives major players like Apple, Samsung, Xiaomi, Vivo, and Oppo 90 days to comply, requiring the “Sanchar Saathi” app to be installed as a non-removable feature on every handset.​

The move signals a significant tightening of state control over consumer electronics in the world’s second-largest telecom market, which boasts over 1.2 billion subscribers.

Government officials argue the measure is a critical defense against a surge in digital fraud and cybercrime. According to the directive, the app serves as a “citizen-centric” shield, enabling authorities to curb the use of stolen phones and combat spoofed IMEI numbers, which are often used in criminal activities.​

Sanchar Saathi: A Digital “Communication Companion”

Launched earlier this year, the Sanchar Saathi (Hindi for “Communication Companion”) platform was initially a web portal designed to empower mobile subscribers. The mandatory app version integrates several key safety features directly into the user interface:​

  • Chakshu: A reporting tool for suspected fraud communications, including malicious calls, SMS, or WhatsApp messages.​
  • Lost/Stolen Mobile Blocking: Uses the Central Equipment Identity Register (CEIR) to block stolen devices across all networks, rendering them useless to thieves.​
  • Connection Management: Allows users to check “Know Mobile Connections in Your Name” to identify unauthorized SIM cards registered against their identity.​
  • Genuineness Checks: Verifies if a device’s hardware and IMEI are authentic.​

While the government highlights recovered devices over 700,000 lost phones have reportedly been traced using the system, the mandatory nature of the app has sparked immediate concern.​

Industry Pushback and Privacy Fears

The directive requires that the app be “undeletable,” a condition that is likely to upset privacy advocates and manufacturers like Apple, which has historically resisted preloading third-party software.

Industry executives, speaking on condition of anonymity, expressed frustration over the lack of prior consultation, fearing the “forced” app could compromise user trust and device performance.​

Privacy advocates are concerned that a government-controlled app with extensive system access could theoretically be used for surveillance. However, the Indian government has consistently denied such intentions, stating that the directive is solely a consumer protection measure.

Manufacturers must also push the app to existing devices via software updates, ensuring the entire active user base is eventually covered.

Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft

Google has announced a new set of Android security protections designed to stop mobile scams…

3 hours ago

Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware

Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a…

5 hours ago

Microsoft Confirms October Windows Updates Can Break Exchange Server Email Services

Microsoft has confirmed that Windows Server security updates released on October 13, 2026, can disrupt…

6 hours ago

OpenCode Security Breach Exposes Third-Party API Keys of its Console Users

OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party…

1 day ago

Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes

Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic…

2 days ago

Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts

Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365…

2 days ago