India orders smartphone makers to preload state-owned cyber safety app
29 comments
·December 1, 2025rishabhaiover
djohnston
I share your abhorrence but are you really shocked? "Think of the children", "Stop the terrorists," these have been the foundations for the erosion of personal liberty for the past thirty years.
JumpCrisscross
Do we have a breakdown of what this app actually does?
alephnerd
Basically IMEI stamping.
qwerty59
Very concerning. I will be suprised if companies like apple comply though.
embedding-shape
Do they actually have a choice? Usually with laws and orders from the government, you can't do much than either go with the flow, try to lobby against it afterwards, or straight up refuse and leave the market. Considering Apple's ties to India, I feel like Apple is unlikely to leave, so that really only leaves Apple with the first; comply and complain.
JumpCrisscross
> Do they actually have a choice?
Yes. Apple's revenues are half as much as the government of India's [1][2]. That's a resource advantage that gives Cupertino real leverage against New Delhi.
[1] https://www.apple.com/newsroom/2025/10/apple-reports-fourth-... $102.5bn / quarter
[2] https://en.wikipedia.org/wiki/List_of_countries_by_governmen... $827bn / year
fsflover
You shouldn't be: https://news.ycombinator.com/item?id=26644216
goku12
As concerning as it is, this is just another addition to the pile of malware that a modern smartphone is. Everyone including SoC manufacturer, RF baseband manufacturer, OEM, OS developer, browser developer and app developers add their own opaque blobs, hidden executable rings, lockdown measures, attestation layers, telemetry, trojan apps, hidden permissions and more.
We lost the game when we allowed these players to impose limits on us in the way we can use the device that we bought with our hard earned money. Even modifying the root image of these OSes is treated like some sort of criminal activity. And there are enough people around ready to gaslight us with the stories about grandma's security, RF regulations, etc. Yet, its the extensive custom mods like Lineage OS that offer any form of security. Their extensive lockdown only leads to higher usage costs and a mountain of malware.
We really need to demand control over our own devices. We should fight to outlaw any restrictions on the ways we can use our own devices. We should strongly condemn and shame the people who try to gaslight us for their greed and duplicity.
brendoelfrendo
Why wouldn't they? If Apple doesn't comply, the Indian government could force them to withdraw from the market or otherwise make their lives difficult. I can't see Apple or their shareholders caring about privacy enough to abandon such a large market.
alephnerd
> I will be suprised if companies like apple comply though
They will.
All tech companies already comply with India's IT Act. And India now manufactures 44% of all iPhones sold in the US [0] while facing the threat of a $38B anti-trust fine [5], so Apple doesn't have much of a choice because both China and Vietnam (the primary competitors for this segment of manufacturing) have similar regulations. Same with Samsung at 25% in CY24 [1] which is trying to further entrench itself in India [2][7][8] due to existential competition from Chinese vendors [3][6].
Heck, Apple complied with similar regulations in Russia [5] before the Ukraine War despite being a smaller market than India with no Apple manufacturing, engineering, or capex presence.
All large companies who face existential threats from Chinese competition have no choice but to entrench in India as it's the only large market with barriers against direct Chinese players - ASEAN has an expansive FTA with China and Brazil is in the process of one as well.
And the Indian government is taking full advantage of this to get large companies to bend to Indian laws, as can be seen with the damocles sword of tax enforcement on Volkswagen [3] while negotiating an FTA with the EU and a potential $38B anti-trust fine against Apple [4] while negotiating a BTA with the US. It's the same playbook China used when it was in India's position today in the late 2000s and early 2010s.
[0] - https://scw-mag.com/news/apples-supply-shift-to-india-speeds...
[1] - https://www.techinasia.com/news/samsung-to-broaden-manufactu...
[2] - https://www.chosun.com/english/industry-en/2025/11/25/SLEYWT...
[3] - https://www.digitimes.com/news/a20251118VL205/2030-samsung-s...
[4] - https://www.reuters.com/sustainability/boards-policy-regulat...
[5] - https://www.macrumors.com/2021/03/16/apple-to-offer-governme...
[6] - https://www.businesskorea.co.kr/news/articleView.html?idxno=...
[7] - https://www.digitimes.com/news/a20250903PD208/samsung-india-...
[8] - https://www.digitimes.com/news/a20241212PR200/samsung-india-...
iancarroll
Even in mainland China, where iOS does have a large amount of changes to comply with local regulations, Apple does not pre-install any apps from anyone.
bilbo0s
>Even in mainland China [..] Apple does not pre-install any apps from anyone.
That's because China has no regulation obliging them to do so.
China takes the other, more comprehensive, route to privacy invasion. Sucking up every bit of data at the router.
alephnerd
China don't require pre-installed apps but the Chinese government require all data processing and storage to be conducted within China with complete source code access. India chose to back off on data sovereignty [0] because it would have had a side effect of making Indian IT Offshoring less competitive.
[0] - https://verfassungsblog.de/cross-border-data-flows-and-india...
hparadiz
This is the Achilles heel of having a closed platform. Eventually the government dictates what's supposed to be in it.
alephnerd
Even an open platform would do nothing. If you are a suspect, your phone would be checked and if you were using something like GrapheneOS, it would be used as evidence against you.
And anyhow, all Android vendors have aligned with the policy as well.
__rito__
I wouldn’t venture in the direction that many here will take.
I will point out that India have the highest number of victims of cyber-fraud. I personally know many people who have lost significant sums through social engineering attacks. The money is transferred to multiple mule accounts and physical cash is siphoned off to the fraudsters by the owners of those account. They choose helpless, illiterate, village dwelling account holders for this.
Another huge issue is unregulated loan apps. There are horror stories of people installing apps in order to take high-interest loans and then those apps stealing their private photos and contacts or accessing camera to take photos in private moments, and then sending those photos to contacts via WhatsApp when interest payment is overdue.
Then there are obvious security issues with terrorism and organized crime.
The government wants data. It's clear why. There is huge potential for misuse.
marginalx
And you trust the government to only use it for good purposes? and not to track people who may be protesting or belong to opposing political/religious/cultural views? We know based on historical pegasus complaints that this trust has to be earned and can't be given.
There are lots of ways to solve for this, mandating that these companies own the identification process through their systems, report misuse, govern apps. Why taken on the ownership of a process that is better handled outside of government while the government holds them to account via huge fines and timelines but giving these large companies ownership of protection from scams or stolen phones etc...? win win and I think these large companies are due spending extra money to protect their users anyway.
JumpCrisscross
> I will point out that India have the highest number of victims of cyber-fraud
Based on what?
> Another huge issue is unregulated loan apps
You don't need to root everyone's phones to regulate financial crime.
> Then there are obvious security issues with terrorism and organized crime
India is building a centralised backdoor into every phone in the country. That's a massive national security risk.
pdyc
What should have happened is that they should have forced mobile vendors to allow users to uninstall all apps. What actually happened is that they are asking for their app to be installed as well, sigh.
stickfigure
What stops someone from loading GrapheneOS on their (Indian) Android phone?
alephnerd
It will be used as evidence that the person who has GrapheneOS on their phone is attempting to break the law. Telegram and Signal chats are often used as evidence of malfeasance in Indian national security cases, so the jump to using GrapheneOS as evidence of malfesance is tiny.
marginalx
"With 5 million total downloads - the app has saved 3.7 million lost phones", this somehow doesn't add up for me, as this implies more than 74% of phones are stolen? Or this this govt lying to pad the numbers to make the app look like a sheep in wolves clothing.
profsummergig
ref: "the new tobacco"
this last year i'm seeing very concerning behavior in students in the 14-20 range. complete addiction to their phones. very deep interests in things i was completely unaware that they existed. similar to how when i started noticing anime girlfriends/waifus in 2016.
about 40% are deep in discord communities where i literally cannot figure out a single sentence of what they're talking about.
if society doesn't do something, and soon, say goodbye to the cognitive ability of a large chunk of future generations.
oldjim798
Honestly shocked it took this long for governments to start doing this; it seemed inevitable that governments would want all the data private entities have been enjoying.
More and more it seems like the benefits of being connected are not worth the cost of being so visible to so many hostile (state and non-state) actors
okokwhatever
Yeah, internet is a dead star in so many ways this days. Repetitive, addictive and a private data sucker. I'm already starting to buy programming books and offline content preparing for a radical semi-disconnection.
catlikesshrimp
Google, the phone manufacturer and now the state running bloatware on my phone. I will have three dialers, calendars, etc. All of them uninstallable
poly2it
Get GrapheneOS. The installation is painless and the OS surperior. No mainstream phone OS is viable in the privacy and security nightmare of today.
I'm shocked by people and state using the crutch of cyber crime or scams to push a totalitarian solution to a problem that is better solved by improved education and targeted campaigns against common security pitfalls.
I abhor any decision that robs even a grain of my individual freedom.