India Orders Apple to Remove Jack Dorsey-Linked Bitchat from App Store Under Section 69A IT Act

India’s Ministry of Electronics and Information Technology (MeitY) issued a formal takedown directive under Section 69A of the Information Technology Act, 2000, mandating the immediate removal of peer-to-peer messaging application Bitchat from Apple’s App Store and TestFlight within the country.

The app, which has received vocal advocacy from Twitter co-founder Jack Dorsey, gained rapid adoption for its ability to transmit encrypted communications across short-range Bluetooth mesh networks without cellular connectivity, centralized servers, or internet infrastructure.

The regulatory action highlights intensifying friction between state telecommunications monitoring frameworks and resilient decentralized communication protocols.

Technical Mechanism: How Bitchat Bypasses Central Servers

Unlike WhatsApp, Signal, or Telegram—which require active cellular data and centralized relay servers to negotiate key exchanges—Bitchat operates entirely at the physical edge:

[Phone A] ──(BLE Hop 10-30m)──► [Phone B (Relay)] ──(BLE Hop)──► [Phone C (Recipient)]
   │                                   │                                 │
   ▼                                   ▼                                 ▼
(Zero Internet)                 (Zero Cellular)                   (Zero Server Logs)

1. Bluetooth Low Energy (BLE) Mesh: Phones running Bitchat broadcast peer-discovery packets over Bluetooth 5.0+. When devices come within 10 to 30 meters of one another, they form ad-hoc multi-hop mesh paths.
2. End-to-End Ratchet Encryption: Messages are encrypted using the Double Ratchet protocol with ephemeral curve keys. Intermediary relay nodes forward cipher packets without reading message contents.
3. No Central Identity: The app does not require a telephone number, email address, or centralized username. Identities exist purely as cryptographic public keys generated on the device.

Why Section 69A Was Invoked

Section 69A of the IT Act grants the Indian central government authority to intercept, block, or demand the takedown of online services in the interests of:

• The sovereignty and integrity of India.
• The security of the State.
• Friendly relations with foreign States.
• Preventing incitement to the commission of any cognizable offense relating to public order.

Government security officials expressed concern that Bitchat’s serverless architecture created a blind spot for law enforcement during localized internet shutdowns, enabling anonymous, untraceable coordination that bypassed legal interception mechanisms.

Availability and Open-Source Persistence

While Apple complied with the directive by geoblocking Bitchat on the Indian App Store and disabling active TestFlight invitation links:

Because Bitchat operates without centralized authentication servers, previously installed copies of the application continue to function without interruption. Android users can also compile the open-source client directly or install signed APK binaries from decentralized repositories.

Public and Industry Reactions

The enforcement action generated polarized reactions across the technology landscape:

• Digital Rights Organizations: Internet Freedom Foundation (IFF) and privacy advocates argued that blocking communication utilities disproportionately impacts citizens seeking offline connectivity during natural disasters, floods, and infrastructure failures.
• Law Enforcement & Telecommunications Bodies: Security analysts supported the takedown, citing past incidents where unmonitored mesh tools were deployed during urban protests to evade state monitoring.

The Bitchat removal sets a notable precedent for how regulatory authorities intend to treat local, serverless communication tools as decentralized peer-to-peer protocols gain wider mainstream traction.