The Sanchar Saathi app: A Government Mandate and Its Implications
The Indian government's decision to mandate the pre-installation of the Sanchar Saathi app on all new smartphones has sparked controversy and raised concerns among digital rights advocates and the public. The app, launched in 2023, allows users to report suspicious phone calls and provides other security features. However, the government's order, effective from March 2026, has faced significant pushback, with critics arguing that it infringes on privacy and may enable surveillance.
The App's Purpose and Features
Sanchar Saathi was introduced as a portal for users to report fraudulent phone calls, a common issue in the country. It also enables users to identify all linked phone numbers and block stolen devices using their unique International Mobile Equipment Identity (IMEI). The app's primary purpose is to enhance telecom cybersecurity by addressing the issue of duplicate or spoofed IMEIs on mobile handsets.
Government's Mandate and Legalities
The Department of Telecommunications (DoT) has ordered smartphone manufacturers to pre-install the app, citing the need to protect telecom cybersecurity. This mandate is unusual, as there is limited precedent for such app pre-installation. While the government has previously mandated apps for specific purposes, like contacts during the COVID-19 pandemic, the Sanchar Saathi app's pre-installation is a more significant step.
The Telecommunications Act, 2023, provides a broad definition of 'telecommunications,' but the DoT has assured that it won't extend beyond its telecom operator mandate. However, an amendment to the Telecom Cyber Security Rules, 2024, introduced a Telecommunication Identifier User Entity (TIUE), which covers a wide range of entities, including smartphone manufacturers and apps like WhatsApp. This amendment has raised concerns about the app's potential impact on privacy and security.
Privacy and Security Concerns
Critics argue that the app's pre-installation could lead to privacy violations, as users may not have the option to uninstall it. The app's elevated access within the phone's operating system could be a security risk, allowing potential over-the-air updates to gain more permissions. This is a significant concern, as it could enable more intrusive access to user data.
Anand Venkatanarayanan, a cybersecurity expert, warns that a compromised app could affect millions of smartphones, as it would have been pre-installed. The app's default permissions, including access to phone, SMS, and camera, could be troubling for users, especially if they are granted without explicit user consent.
User Control and Uninstallation
The Communications Minister, Jyotiraditya Scindia, claims that users can choose to 'delete' the app or avoid registering, keeping it dormant. However, the app's visibility and accessibility at the time of device setup are crucial. If the app is not readily visible or accessible, users may not be aware of its presence and potential risks.
Conclusion and Future Outlook
The Sanchar Saathi app's pre-installation mandate has sparked a debate on privacy, security, and government overreach. While the app aims to enhance cybersecurity, the potential risks and lack of user control raise concerns. As the app's impact unfolds, further scrutiny and public discussion are essential to ensure a balanced approach to telecom security and user privacy.
