Bluetooth Mesh in a Blackout: Use Cases and Security Implications for India

Introduction

Internet shutdowns are policies that aim to disconnect the digital communication. Bluetooth mesh apps undermine shutdowns by allowing the phones to communicate with each other without using mobile data, wi fi, sim cards, servers etc

The technology can create backdoors for communication during disasters, blackouts and other disruptions. It can also create plausible deniability for the organisations sending the messages, targets or other evidence. The dilemma this presents to India is how to balance between their security needs and other freedoms that shutdowns interfere.

Table of Contents

1. How bluetooth mesh apps work

2. Why people use them

3. India’s security dilemma

4. The privacy issue

5. A realistic policy response

How Mesh Apps Work

Mesh apps enable phones to communicate directly or indirectly with each other over short ranges. This means that a Bluetooth message can travel from one phone to another and then to another until it reaches destination if there are enough people nearby with the same application.

Bitchat, Briar, Bridgefy and Firechat are some of the mesh apps that have been reported to have such capabilities. The technologies do not require data plans or cellular networks, or even wi fi. Instead, they connect messages through Bluetooth connections or other local area network technologies without using servers or phone numbers. 

Their effectiveness depends on several factors:

• Proximity: how close the users are to each other

• Number of people: the more people the easier it is to deliver messages

• Bluetooth range and performance

• Whether people have left the software running all the time or not

• How well the apps are designed and secured.

With fewer people, Bluetooth range is limited, but in a busy city a message may travel far due to increased relay devices.

Why People Use Them

In many instances, these applications are very useful. They can help people communicate during disasters or local network failures. Such tools can play a role in helping volunteers to provide critical information about relief centres or the locations of relatives.

They can also help people communicate during shutdowns. For instance, in Delhi’s protests against government policies, people shared news, warnings and directions using Bitchat. 

This helped protesters, especially those who had little access to the internet, to avoid police traps and get away with their activities. During blackout shutdowns, the ability to share information can be crucial to some people. If authorities are trying to cut information dissemination during civil unrest, blocking messages may prevent sharing of vital news as much as it would stop fake stories.

India’s Security Dilemma

India’s concerns are understandable. The nature of mesh apps makes it almost impossible to identify a particular service provider or even track down messages. Traditional ways of investigating crimes online may not work against mesh apps since they do not have traditional records or subscribership databases. Authorities claim that the apps can be used to:

• Coordinate violent protests and unauthorized gatherings

• Spread unlawful information, such as propaganda, terrorist messages or other dangerous content

• Organize criminal activities by enabling people to share instructions anonymously and beyond the reach of telecom companies

• Circumvent state-mandated communication restrictions

• Share information freely without the involvement of traditional telecom networks.

In July 2026, the government of India asked GitHub to delist three URLs related to Bitchat on the grounds that the technology could undermine lawful interception, investigation, attribution and tracking of malicious activities. The government blamed the tool for its role in the recent shutdowns and political unrest. The notice argued that it could exacerbate existing public order problems. [2] The irony is that the same tool that promotes undesirable demonstrations may also promote beneficial communications, such as disaster management during network outages.

Why Blocking May Not Work

Internet shutdowns typically take out a particular infrastructure. It can be done by blocking mobile networks or sites or even working directly with telecom providers to cut out a significant population from the internet. Mesh networks are resistant to such interference because all people linked to them are connected directly or indirectly.

Bluetooth messaging apps allow users to send messages to each other directly or indirectly through a chain of relays and not rely on servers or the internet infrastructure. This makes monitoring and tracking of sources and relays of information by investigators difficult.

Blocking the websites and links that distribute such apps may only be effective if people are prevented from installing the tools. However, in a densely populated region, it may be extremely difficult to monitor all phones and ensure that nobody is running the applications. The alternative of shutting down all devices is overly restrictive and potentially illegal.

The Privacy Problem

There are additional concerns about the use of mesh apps. Offline communication tools do not guarantee offline safety. Various studies have shown that many such applications have vulnerabilities that can be easily exploited to gather intelligence on the users. Metadata in mesh apps can sometimes be used to identify, track or collect information on individuals. [8] Users should always be wary of using such tools since they can be abused regardless of their encryption capabilities. It is important to install apps from reliable sources, use additional security measures and avoid providing private information if possible.

A Realistic Policy Response

India must respond to mesh apps wisely. A better approach will have the following considerations:

1. Thresholds: Internet shutdowns and targeting of specific applications requires justification beyond mere allegations. The state should only act against such apps if there is sufficient information on threats to national security or even lives.

2. Time limits: Authorities should impose such measures for short periods of time and renew the restrictions only upon review and justification.

3. Oversight: Internet shutdowns and blocking of applications should be monitored by independent bodies whenever possible.

4. Exceptions: Medical, disaster management, media, legal and humanitarian communication should never be interrupted even during shutdowns.

5. Engagement: Intelligence agencies should work to understand the weaknesses and strengths of mesh apps and engage in counterintelligence. [5] [9]

6. Information: The government should explain publicly the reasons for internet shutdowns and the reasons for targeting particular applications whenever possible.

Conclusion

Mesh applications are a prime example of both the vulnerability of the internet shutdown and the dilemma it presents to the Indian state. Offline messengers can provide avert the effects of internet shutdown by allowing people to communicate and collaborate despite the restrictions. India has to weigh between its security needs and other values including personal privacy, freedom, and preparedness in times of crisis.

Blocking such tools is not the most effective option due to the risks involved and lack of practicality. Instead, India should conduct targeted investigations on suspected security threats and work on developing better alternatives to offline messenger apps.

References.

1. How bluetooth mesh apps work

2. India’s security dilemma

3. The privacy issue

4. Why blocking may not work

5. Why people use them

6. A realistic policy response