India Mandates Pre-Installed Cyber Safety App on New Phones
- ByStartupStory | December 1, 2025
In a significant move to bolster cybersecurity and curb telecom fraud, the Indian government has directed all smartphone manufacturers and importers to pre-install a state-owned cybersecurity application called “Sanchar Saathi” on every new mobile device sold within the country. This directive, issued on November 28, 2025, by the Department of Telecommunications (DoT), requires compliance within 90 days, with an additional 30 days to file a compliance report.
Sanchar Saathi is a non-removable app designed to enhance telecom security by allowing users to verify the legitimacy of phone devices through their IMEI numbers, report lost or stolen phones instantly, block fraudulent mobile connections, and reduce scams involving cloned or spoofed phone numbers. The app has been instrumental since its launch in January, helping recover more than 700,000 lost phones, including 50,000 in October 2025 alone, and blocking over 3.7 million stolen or fraudulent devices.
Under the new rules, the app must be prominently displayed and accessible during the initial setup process of the smartphone, ensuring users are aware of its presence and functionalities. For devices already in the sales pipeline or retail channels, manufacturers and importers are mandated to roll out the app through software updates, effectively extending coverage to almost all smartphones in the Indian market.
While aimed at combating rising cyber fraud, phone theft, and the black-market circulation of counterfeit devices, this compulsory installation has raised concerns among privacy advocates and smartphone manufacturers. Apple, known for its strong stance against pre-installing third-party apps on its iPhones, is expected to resist the mandate, citing user privacy and control concerns. Manufacturers like Samsung, Vivo, Oppo, and Xiaomi are also impacted by the directive, although some local players like Lava International have expressed support and commitment to comply.
The directive comes amidst increasing cybersecurity threats targeting India’s extensive telecom network, which hosts over 1.2 billion mobile subscribers. The government asserts that Sanchar Saathi is essential to protect users against the serious risks posed by duplicate or spoofed IMEI numbers that facilitate scams and enable misuse of telecommunications infrastructure.
Critics worry that the lack of user choice to uninstall or disable the app potentially contradicts previous government commitments to minimize pre-installed software and enhance app screening processes. They also raise concerns about the app’s data access permissions and transparency around user privacy protections.
The introduction of Sanchar Saathi as a mandatory app marks a new front in India’s digital security policy, blending consumer protection with regulatory enforcement in an era when smartphones serve as primary digital touchpoints for billions. This measure aims not only to improve device security but also to establish a centralized, trusted registry of mobile devices to support law enforcement and anti-fraud initiatives.
With the timeline for enforcement rapidly approaching, the government expects full collaboration from device makers. The app installation mandate signals India’s proactive stance on digital safety while navigating the complex balance between regulatory control and consumer rights in the smartphone ecosystem.






