In a move that has flown under the public radar but could reshape India’s digital landscape, the government has directed smartphone makers to pre-install the Sanchar Saathi Cyber Security app on all new devices — and prevent users from deleting it.
As someone who has spent two decades studying cyber-risk, telecom fraud, and national-security technology, I understand the intent behind this decision. But the implementation raises significant questions we cannot afford to ignore.critical role as a core component of the modern web's backbone.
Sanchar Saathi is not new. Over the past year, it has grown into a powerful tool for:
By the government’s own accounts, the platform has helped identify millions of fraudulent connections and recover large numbers of stolen devices. Strengthening this ecosystem is clearly aligned with national Cyber Security goals.
But mandating a government app — and removing the user’s ability to uninstall it — is a big leap. One that comes with consequences.
A non-removable app, especially one built by the government, immediately raises concerns around choice and consent — both central principles in modern privacy frameworks, including India’s own DPDPA.
Even if the app doesn’t collect sensitive data, perception matters. A preloaded state app may be interpreted as surveillance, whether accurate or not.
Every additional system app increases potential vulnerabilities. If Sanchar Saathi hasn’t undergone rigorous independent security audits, it may unintentionally become a point of exploitation.
Once we accept one forced system app, more could follow. This shift has lasting implications for digital freedom.
OEMs must modify software builds, add new compliance checks, and update their supply chains — not trivial tasks for companies already bound by global standards.
Apple in particular is known for strict control over its OS and resistance to mandated apps. Negotiations or pushback seem inevitable.
If the app introduces any security flaw, manufacturers may share the blame. This is a risk global companies will be extremely cautious about.
Devices with non-removable government software often attract scrutiny from global regulators and privacy advocates. This may impact how Indian-sold devices are seen globally.
There is no argument that cyberfraud in India is escalating — and rapidly. Tools like Sanchar Saathi absolutely have a role to play in countering these threats.
But Cyber Security built through force, opacity, or unilateral mandates is fragile. If this decision is to truly enhance national security, it must be accompanied by:
India has an opportunity to become a world leader in public-interest cyber regulation. But leadership requires not only strong tools — it requires
trust, transparency, and user rights
built into the system from day one.The goal behind the Sanchar Saathi mandate is noble.The implementation must live up to the same standard.
India stands at a pivotal moment in its cyber-governance journey. Mandating Sanchar Saathi on all smartphones signals a strong intent to curb fraud and secure the telecom ecosystem — goals that deserve full support. But security cannot come at the cost of user autonomy, opaque implementation, or weakened trust.
True national Cyber Security is built not just on powerful tools, but on frameworks that respect citizens, empower users, and maintain transparency. If India gets this balance right, we won’t just protect millions of devices — we’ll set a global benchmark for democratic, privacy-conscious digital regulation.
© 2026 Digital Task Force (ISO-9001 : 2015 & ISO/IEC 27001 : 2022 Certified)
.jpg)
.jpg)
.jpg)