Apple under pressure: India wants to see iOS source code

India is once again increasing the pressure on Apple. As part of new security requirements, the government is demanding access to the iOS source code. Officially, this is about national security and protection against cyber threats. In practice, however, this demand would deeply interfere with Apple's security architecture. All indications suggest that this attempt will fail.

For years, governments worldwide have been trying to gain more control over smartphones and operating systems. Updates, encryption, pre-installed apps, and access for authorities are recurring focus areas. India has become a particularly active player in this arena. For Apple, the country is an important production and sales market, but also a growing regulatory challenge. The current debate surrounding the iOS source code is just the latest manifestation of this conflict.

New security standards without a global precedent

Specifically, the issue concerns a package of 83 proposed security standards, originally drafted in 2023. Only now, however, is the Indian government considering implementing these guidelines as legal requirements. The standards cover a wide range of topics and affect almost all major smartphone manufacturers.

According to Reuters, Apple, Google, Samsung, Xiaomi, and the industry association MAIT have jointly raised objections. The central point of criticism is that there is no international precedent for many of these demands. Furthermore, they would force the disclosure of proprietary and security-relevant details.

Some of the requirements are considered relatively moderate. These include the obligation to inform the government about important software updates, to create and retain detailed security audit logs for a period of twelve months, and to regularly prompt users to review their app permissions.

The demand for disclosure of the source code

The further requirements are considerably more problematic. India demands that manufacturers disclose their source code and submit it to government-designated laboratories for review. There, the code is to be tested for vulnerabilities.

It is precisely at this point that the plans encounter massive resistance. According to a confidential MAIT document, such source code review is not feasible due to confidentiality and data protection requirements. Furthermore, it is pointed out that key markets in the EU, North America, Australia, and Africa have no comparable regulations.

Apple's clear stance on security

Regardless of the political debate, it is considered extremely difficult to convince Apple to even disclose its source code. The company has always been very rigorous in protecting its most sensitive software components. While individual components have been disclosed in the past, such as with the open-source elements of OS X El Capitan in 2015, core parts of iOS have always remained confidential.

A well-known example is the ongoing debate about encryption. Governments worldwide repeatedly demand backdoors to access encrypted content. Apple has consistently refused to do so. This stance goes so far that the company would rather disable certain privacy features in the UK than weaken its end-to-end encryption.

The same argument applies to the source code. Disclosure would reveal particularly sensitive, security-relevant elements. This could make it easier for attackers to identify vulnerabilities. Even if governments emphasize that their testing labs are secure, large technology companies see no reliable guarantee of this. From Apple's perspective, it is therefore plausible to argue that it is safer not to release the source code at all.

Persistent regulatory pressure from India

The latest report is the latest in a series of measures India has implemented in recent years to more strictly regulate tech companies. Most recently, this included the requirement to pre-install the government-approved app "Sanchar Saathi" on new smartphones. The government justified this measure as a way to combat cyber threats and reduce the number of devices on the black market.

At the end of 2025, India also attempted to persuade Apple and Google to pre-install government-supported apps. At one point, it was even suggested that corresponding legislative changes might follow. However, after these plans became public, the government quickly withdrew them.

A similar initiative was launched in 2023. At that time, Apple and other manufacturers were required to submit security updates for government review in advance. An unnamed official explained, without irony, that pre-installed apps could represent a security vulnerability and that the government wanted to ensure that no other countries, including China, could exploit it. The process was presented as a matter of national security.

Privacy and security are a top priority for Apple

It seems highly unlikely that Apple would grant India access to the iOS source code. Even if legally compelled, the company would probably only disclose the absolute minimum necessary code and would defend itself legally against any further demands. From Apple's perspective, the risks to security and data privacy are too high.

This case demonstrates once again how strongly government control interests and technical security concepts can clash. For Apple, protecting its own platforms remains paramount. This is precisely why India's attempt is likely to ultimately fail. (Image: Shutterstock / Tee11)