Govt orders Apple and Google to remove 7 mobile apps that stall e-rickshaws

The Indian government has directed major global tech giants Google and Apple to remove seven mobile applications from their respective app stores, citing concerns that these apps are being misused to remotely disable e-rickshaws and other electric vehicles. This directive comes after viral videos surfaced on social media showing individuals using their smartphones to deactivate e-rickshaws while they were in motion, causing drivers to be stranded. The affected apps include BAT-BMS, SMART BMS, Lossigy, and Epoch-i-ion, among others. These applications are described as battery management system (BMS) tools, typically used to monitor battery parameters such as voltage, current, and temperature. However, officials warn that in inadequately secured systems, these apps can be exploited via Bluetooth connections to remotely halt vehicle operations.

According to sources, the Ministry of Electronics and Information Technology (MeitY) has issued notices to both Google and Apple, urging them to take down the apps immediately. The government has emphasized that any further instances of such misuse will result in additional measures being taken. MeitY Secretary S Krishnan confirmed that the issue had reached the government’s attention and noted that two such apps had already been removed from app stores. The ministry continues to engage with platform providers to ensure that harmful applications are not accessible to the public.

The vulnerability lies in the design of certain battery systems, particularly lower-cost models that offer Bluetooth access without requiring passwords or proper authentication. This allows unauthorized users to connect to the battery system and manipulate its functions. In some cases, this has led to e-rickshaws being turned off remotely, disrupting the livelihoods of drivers who rely heavily on these vehicles for income. Social media footage captured incidents where drivers were left stranded, unable to resume work for extended periods.

The government has not invoked Section 69A of the Information Technology Act, which is commonly used to block content deemed harmful. Instead, authorities are considering the continued availability of these apps as a potential legal breach, possibly affecting the legal protections afforded to Apple and Google under Section 79 of the IT Act. This section provides immunity to intermediaries like app store operators, provided they comply with legal notices. Officials have not specified which exact laws the apps might be violating, nor have they indicated whether notices have been sent directly to the app developers or battery system manufacturers.

In a demonstration, Hindustan Times successfully disabled an e-rickshaw using one of the apps after connecting to its unsecured Bluetooth-enabled BMS. While the primary function of these apps is to monitor battery health, they can also be manipulated to cut power to lithium-ion packs when linked to an unprotected Bluetooth interface. This highlights the dual nature of such technologies—useful for legitimate purposes but also susceptible to exploitation if security measures are lacking.

The situation has raised alarm among e-rickshaw drivers, many of whom rent the vehicles and depend on daily earnings. The disruption caused by these pranks not only affects their immediate income but also undermines trust in the reliability of electric vehicles. As the government intensifies its scrutiny of connected-device applications, it is also examining similar apps for potential risks. This move aligns with a broader initiative by the Centre to regulate and remove apps perceived as threats to national security, data privacy, and public safety. Over the past few years, hundreds of Chinese-linked apps have been banned, reflecting a growing emphasis on protecting domestic interests and ensuring technological sovereignty.

Looking ahead, the government is likely to maintain pressure on app stores and manufacturers to enhance security protocols. It remains unclear whether legal action will be taken against the developers or producers of vulnerable battery systems. Meanwhile, the incident underscores the need for stronger cybersecurity standards in consumer electronics, especially those integral to daily life and economic activity. As the investigation progresses, more clarity is expected regarding the specific legal grounds for the removal of these apps and the extent of regulatory actions that may follow.