In a world where smartphones are nearly inseparable from our daily lives, governments are ramping up efforts to include pre-installed software on these devices. These moves are seen as part of a global trend towards pervasive tracking and content control. From 2025 to 2026, these mandates have stirred unease, threatening privacy and free expression as state power integrates into personal tech.
Daniel Kahn Gillmor, a senior technologist at the ACLU, emphasizes the danger, noting, ‘These mandates represent a grave threat to our privacy.’ Apps linked to persistent identifiers can create detailed user profiles, while updates might silently sneak in surveillance features. Often, these measures begin under the guise of benign intentions but risk evolving into tools of control, as witnessed with Russia’s 2025 launch of the 'Max' app, which monopolizes messaging and transactions, sidelining competitors.
Russia and India have emerged as frontrunners in explicitly mandating pre-installed apps, discouraging alternatives, and setting a concerning standard. In Russia, the 'Max' app, associated with state interests, becomes essential for users to access services, creating a barrier for those deemed undesirable. The threat intensifies as new features can be introduced without user consent through updates.
India’s Sanchar Saathi app, mandated in 2025 for cybersecurity, sparked backlash for accessing calls, messages, and personal files. Despite official rollback claims, the app remains widespread and irremovable. The ACLU has equated such software to an ‘ankle bracelet,’ pointing at constant surveillance capabilities.
Governments are not just relying on explicit mandates. In many cases, they're using indirect pressures to enforce compliance. In the U.S., the rise of age-verification laws for adult content and social media has swept across states, despite questions about their effectiveness. This trend is expected to continue, further chilling access through privacy invasions.
De facto compliance is also a growing concern. Apps like Australia’s Electronic Travel Authority and the U.S. Customs’ Mobile Passport Control incentivize use through perks and conveniences, nudging users toward compliance. In China, WeChat’s dominance effectively censors content deemed harmful, illustrating the power of network effects.
The controversial practice of client-side scanning looms as a significant threat to encryption and privacy. The EU’s debated Chat Control proposal has sparked backlash, while the UK's nudity filter proposals hint at a broader scope for scanning, raising alarms over government overreach.
“If forced to choose between undermining encryption… or leaving Europe, Signal would unfortunately make the decision to leave the market,” said Meredith Whittaker from Signal, highlighting the tough decisions companies may face.
Privacy groups like the EFF continue to challenge these mandates, underscoring the need for open ecosystems over compelled software. As governments push forward with these initiatives, the battle for digital rights intensifies.