Sanchar Saathi app mandate sparks privacy debate

The Department of Telecommunications (DoT) issued a directive on 28 November 2025, requiring smartphone manufacturers to pre-install the Sanchar Saathi app on all new devices sold in the country within 90 days. For existing devices, the app would be pushed via over-the-air (OTA) updates.

Launched in 2023, the app aims to enhance cybersecurity by verifying IMEI numbers, tracking lost or stolen phones, blocking fraudulent devices, and combating telecom scams. Government figures highlight its success: over 700,000 phones recovered and 3.7 million devices blocked since inception, with updated stats showing 200 million portal users, 15 million app users, 1.43 million suspicious connections disconnected, 4.096 million fake connections blocked, and 620,000 fraud-linked IMEIs halted.

The mandate frames the app as a tool for consumer protection, tying into broader efforts like SIM-binding for apps such as WhatsApp and Telegram. Proponents argue it addresses rising cyber fraud, providing a centralised system for users to report issues and verify device authenticity. However, the directive specifies that the app's functionality should "neither be disabled nor restricted," raising questions about its removability.

Privacy concerns

Media activist Nikhil Pahwa's X post on the Sanchar Saathi app mandate has amplified widespread concerns, describing it as a "government tracker" and an invasion of privacy without public consultation. Pahwa critiques the app's undeletable nature, warning it could enable surveillance by accessing sensitive data like location, contacts, SMS, and device storage. He labels the process "dictatorial," pointing to the lack of transparency in data handling and the government's exemptions from the Digital Personal Data Protection Act, 2023.

These worries are echoed by privacy advocates, opposition parties like Congress, and experts who call it unconstitutional. Critics highlight the history of data breaches in the country, such as the 2023 Aadhaar hack affecting over 800 million people, which exposed biometrics and personal details. The app's mandate creates a "massive attack surface" for hackers, potentially leading to large-scale breaches.

Comparisons to Russia's mandatory MAX Messenger app since August 2025 fuel fears of a slippery slope towards expanded state control, including future requirements for digital IDs or VPN blockers. While some note that private apps collect similar data voluntarily, the coercive element of a government mandate distinguishes it, potentially disrupting business models and infringing on personal rights.

Government clarification fails to assure users

On 2 December, Communications Minister Jyotiraditya Scindia responded via X, asserting the Sanchar Saathi app mandate is "completely voluntary and democratic." He clarified that users can activate it for benefits or delete it anytime, countering claims that it is undeletable. This addresses core criticisms, framing the app as an optional security tool rather than forced surveillance.

However, scepticism remains due to apparent contradictions with the DoT directive's wording. Replies to Scindia's post accuse the government of backpedalling amid backlash, possibly from manufacturers like Apple. Without updated official documentation, doubts persist on actual enforceability, with calls for audits and opt-in alternatives.

The debate underscores tensions between security and privacy in the country's digital landscape. Legal challenges under privacy rights may emerge, and groups like the Internet Freedom Foundation are monitoring developments. As the Sanchar Saathi app mandate rolls out, its implementation on new devices will test the balance between fraud prevention and user autonomy.