NEW DELHI (AP) — India’s telecoms ministry has directed smartphone manufacturers to pre-install a government-run cybersecurity app on all new devices, according to a government order, raising concerns of data privacy and user consent in one of the largest handset markets in the world.

The Ministry of Communications' order issued Monday asked smartphone makers to pre-install the government’s “Sanchar Saathi” app on all new devices within 90 days and to prevent users from deleting it. The order also requires manufacturers to push the app onto older models through a software update, extending the mandate beyond phones available in the market.

The ministry said the app, which is available to India’s 1.2 billion smartphone users, was essential in “curbing misuse of telecom resources for cyber frauds and ensuring telecom cyber security.” But privacy advocates say the order marks an effort to erode user privacy and consent.

“This is the beginning. It is government testing the waters,” said Nikhil Pahwa, a digital policy expert and founder of the tech site MediaNama. “Once a government app is forcibly pre-installed on our devices, what’s to stop them from pushing future apps that could be used for surveillance?”

The “Sanchar Saathi” app, which was released in January, was designed to let users block and track lost or stolen phones and to identify and shut down fraudulent mobile connections. Since its launch, it has drawn more than 5 million downloads and helped recover more than 700,000 lost devices, according to government data.

Pahwa said the main concern is that the app’s role could eventually expand, giving authorities greater ability to “access device status.” He said the order also removes user consent as a choice.

“Phones are our personal spaces. We have a choice to have what we want on them. Here the government is taking away that choice,” he said.

The order is also expected to face resistance from smartphone companies like U.S.-based Apple, whose internal policies prohibit preinstalling third-party apps on its devices, including those developed by governments.

It also comes as several governments take similar steps.

In Russia, authorities have recently promoted the MAX messaging service, which must be pre-installed on all smartphones. Critics say the platform functions as a surveillance tool, noting that MAX openly states it will provide user data to officials upon request.