India’s latest move to tighten smartphone security has quietly set off alarm bells across the global tech industry. The government is proposing a sweeping set of new rules that could require smartphone makers to share source code, notify authorities before rolling out major software updates, and comply with dozens of additional security standards — a plan that has drawn strong resistance from companies like Apple, Samsung, and Google.
According to multiple people familiar with the discussions, the proposals have sparked intense behind-the-scenes lobbying, with tech giants warning that India’s demands go far beyond anything seen in other major markets.
What India Is Proposing — And Why
The proposed framework, known as the Indian Telecom Security Assurance Requirements, includes 83 separate security standards aimed at protecting user data in the world’s second-largest smartphone market, which now has nearly 750 million active devices.
The push comes as the Modi government ramps up its focus on cybersecurity, citing a sharp rise in online fraud, data breaches, and concerns over digital surveillance threats.
India’s IT Secretary S. Krishnan has said the government is open to addressing “legitimate concerns” raised by the industry, stressing that consultations are still ongoing and that it’s too early to draw conclusions.
The Most Controversial Demand: Source Code Access
At the centre of the dispute is one particularly sensitive requirement — government access to smartphone source code.
Source code is the core programming that makes devices function, and it’s among the most closely guarded secrets in the tech world. Under the Indian proposal, companies would be required to submit their source code for review, analysis, and possible testing at government-designated laboratories in India.
Industry executives argue this creates unprecedented risks.
- Apple has previously refused similar requests from China
- Even U.S. law enforcement has failed to gain such access
- No major market in Europe, North America, Australia, or Africa mandates this level of disclosure
In a confidential document reviewed by Reuters, MAIT — which represents Apple, Samsung, Google, Xiaomi and others — said outright that such reviews are “not possible” due to security and privacy concerns.
More Rules, More Resistance
The proposals don’t stop at source code. Other requirements include:
- Mandatory alerts to the government before releasing major software updates or security patches
- Automatic and periodic malware scans on devices
- Allowing users to uninstall pre-installed apps
- Blocking apps from accessing cameras and microphones in the background
- Storing system activity logs on devices for at least 12 months
Industry representatives say several of these ideas are technically impractical.
MAIT has warned that continuous malware scanning could severely drain battery life, while holding back updates for government review could delay urgent security fixes. The log-storage rule, the group said, is also unrealistic due to limited on-device storage space.
A Familiar Pattern of Tension With Big Tech
This isn’t the first time India’s regulatory approach has unsettled global tech companies.
- Just last month, the government revoked a mandate requiring a state-run cyber safety app after concerns over surveillance
- In contrast, it pushed through strict testing rules for security cameras last year, brushing aside lobbying over Chinese spying fears
The current standoff fits into a broader pattern where India is asserting stronger control over digital infrastructure — even when it puts it at odds with Big Tech.
Why India Matters So Much
The stakes are high. According to Counterpoint Research:
- Xiaomi holds around 19% of India’s smartphone market
- Samsung follows with 15%
- Apple, while smaller, still accounts for 5% — a crucial premium segment
Most Android phones in India rely on Google’s operating system, meaning any compliance changes could ripple across the entire ecosystem.
What Happens Next?
The security standards were originally drafted in 2023, but they’re now under renewed focus as the government considers giving them legal force. Another round of meetings between Indian officials and tech executives is scheduled soon, and industry sources say MAIT has formally asked the government to drop the source code requirement altogether.
Whether India softens its stance or pushes ahead could shape how global tech companies operate in one of their most important growth markets.
Final Words
India’s smartphone security proposal is being framed as a move to protect users — but for Apple, Google, Samsung, and others, it raises red flags about intellectual property, privacy, and operational feasibility.
This is no longer just about software rules. It’s about who controls the digital nervous system of a billion-user market — and how far governments can go before tech giants push back.
The tug of war is far from over.
And its outcome could redefine how smartphones are regulated not just in India, but globally.
