India has ordered the world's biggest smartphone makers to install a government cybersecurity app on all new devices—an app that users will not be able to delete. The move targets brands popular in Kenya, including Samsung, Apple, and Xiaomi, giving them a 90-day deadline to comply.

This decision from New Delhi sends ripples across the globe, setting a contentious precedent that could influence how governments, including Kenya's, approach the escalating war on cybercrime versus the citizen's right to digital privacy. For Kenyans, who face a surge in mobile banking fraud, it raises a critical question: is this a necessary protection or a dangerous overreach?

A Tool to Fight Surging Cybercrime

The app at the center of the mandate is Sanchar Saathi, developed by India's Department of Telecommunications (DoT). Its stated purpose is to empower mobile users by allowing them to block stolen phones, verify the authenticity of a device using its IMEI number, and report fraudulent calls or messages. The government argues the tool is essential to safeguard citizens from a wave of financial fraud and misuse of telecom resources. Since its launch in May 2023, the service has already blocked over 4.2 million lost or stolen devices.

The order, issued privately on November 28, 2025, requires that the app not only be pre-installed but also be unremovable by the user. For phones already in the supply chain, manufacturers must push the app via software updates.

Kenya's Parallel Struggle

The context for India's decision is a sharp rise in cyber fraud, a reality mirrored in Kenya. According to the Communications Authority of Kenya (CA), the country detected over 4.5 billion cyber threat events between April and June 2025 alone, an 80.7% increase from the previous quarter. Mobile banking has become the prime target, with hackers stealing a record KES 1.59 billion from Kenyan banks last year, half of which was lost through mobile channels.

This makes the debate over state-led security solutions intensely relevant. The brands affected by India's order have significant market share in Kenya. As of June 2025, Samsung is the leading brand with over 30% of the market, while Xiaomi has seen strong growth. Apple also remains a key player.

The Line Between Protection and Intrusion

While the Sanchar Saathi app offers practical security features, privacy advocates have raised alarms. The core concern, as noted by technology lawyer Mishi Choudhary, is that making the app mandatory and unremovable “effectively removes user consent as a meaningful choice.”

Critics worry about the potential for data harvesting and surveillance. The app's Android version, for instance, can request access to a user's SMS messages, call logs, camera, and files. This raises questions about what data the government could access under the guise of security.

Kenya has its own legal framework, including the Data Protection Act of 2019 and a National Cybersecurity Strategy, which would complicate the introduction of a similar mandatory app. The government, through the National Computer and Cybercrimes Coordination Committee (NC4), is actively working to strengthen the country's digital defenses.

As smartphone manufacturers weigh their response to India's directive, the world watches to see where the line will be drawn between state-mandated security and the fundamental right to digital privacy—a question that may soon land on Kenya's own doorstep.