Cloudflare's VPN App Removed From Half of India's Major App Stores

In a significant move, more than half a dozen VPN apps have been pulled from India’s Apple App Store and Google Play Store following intervention from government authorities. This development marks the first major implementation of India’s 2022 regulatory framework governing VPN apps.

Table of Contents

Background on India’s Regulatory Framework

The Indian Ministry of Home Affairs issued removal orders for the affected apps, according to a document reviewed by TechCrunch and a disclosure made by Google to Lumen, Harvard University’s database that tracks government takedown requests globally. Among the impacted apps are Hide.me and PrivadoVPN.

Indian Cyber Crime Coordination Centre’s Demands

In a communication to one of the affected developers, seen by TechCrunch, Apple cited a ‘demand’ from the Indian Cyber Crime Coordination Centre (ICCC), part of the Ministry of Home Affairs. The ICCC deemed the developer’s content as contravening Indian law.

Consequences for VPN Providers

The stringent requirements prompted pushback from major industry players. Leading brands like NordVPN, ExpressVPN, Surfshark, and Proton VPN voiced significant reservations about the rules, with several announcing plans to withdraw their server infrastructure from India.

Impact on Major VPN Providers

NordVPN: Despite continuing to maintain services for Indian customers, NordVPN has stopped marketing its app in the country.
ExpressVPN: Similar to NordVPN, ExpressVPN continues to serve Indian users but has ceased promoting its app in India.
Surfshark: Surfshark has also stopped marketing its app in India while continuing to offer services to customers in the country.

Cloudflare’s 1.1.1.1 App Affected

Cloudflare’s widely used VPN app, 1.1.1.1, is among those affected by the government’s removal order. The company did not respond to requests for comment on this development.

Industry Reaction

Industry players have expressed concerns about India’s new regulatory framework. Some of the key issues raised include:

Data retention: VPN providers and cloud service operators are required to maintain comprehensive records of their customers, including names, addresses, IP addresses, and transaction histories, for a five-year period.
Server infrastructure: Several leading brands have announced plans to withdraw their server infrastructure from India in response to the new rules.

Government Authorities’ Response

The Ministry of Home Affairs, as well as Apple, Google, and Cloudflare, did not respond to requests for comment on this development.

Conclusion

This enforcement action marks a significant shift in India’s approach to regulating VPN apps. The impact on major industry players remains uncertain at present. However, it is likely that the new regulatory framework will have far-reaching implications for the global VPN market.