Technology

India Orders GitHub to Remove Bitchat Repositories, Targeting App Architecture Over Content

Martin HollowayPublished 7d ago5 min readBased on 4 sources
Reading level
India Orders GitHub to Remove Bitchat Repositories, Targeting App Architecture Over Content

India's Ministry of Home Affairs directed GitHub to restrict access to three repositories for Jack Dorsey's Bluetooth mesh messaging app Bitchat, citing the app's anonymous, decentralized architecture as a potential facilitator of unlawful activity. The notice, dated July 23, 2026 and issued by the Indian Cybercrime Coordination Centre (I4C) under the Home Ministry, gave GitHub three hours to comply. Dorsey posted the notice on X, and TechCrunch reported the story the following day (TechCrunch).

The takedown order did not identify specific posts, messages, or repositories containing unlawful material. It targeted the entire software project based on how it works, arguing that Bitchat's decentralized architecture could allow communication during internet shutdowns and make lawful interception more difficult.

That distinction matters. Mishi Choudhary, founder of digital rights group SFLC.in, told TechCrunch that the legal provisions cited in the notice do not clearly authorize seeking removal of an entire software project because of its architecture rather than specific illegal content. Before 2021, the Indian government typically relied on Section 69A of the IT Act and the 2009 Blocking Rules for nationwide content removal, a framework designed around blocking specific URLs or online material rather than software repositories.

Bitchat operates through Bluetooth mesh networks, allowing users to send messages without Wi-Fi or cell reception. Dorsey launched the app as an open-source project in July 2025, promising secure and private messaging without centralized infrastructure. He acknowledged at the time that Bitchat had not been tested for security. The app was available on the iOS App Store by late July 2025.

The takedown attempt came during student-led protests in New Delhi over alleged examination paper leaks, a movement protesters dubbed "cockroach," with demonstrators demanding the resignation of Education Minister Dharmendra Pradhan. After internet services were suspended during the protests, some demonstrators downloaded offline messaging apps including Bitchat and Briar.

Download data underscores how quickly Bitchat adoption surged in India. The country accounted for roughly 85% of Bitchat's global downloads between July 17 and July 23, 2026, compared with about 1% over the previous 30 days. Bitchat was downloaded more than 91,000 times in India in the five days leading up to approximately July 23, after downloads jumped thirty-two-fold on July 19 from the prior day. Daily active users in India reached more than 330,000 on the date covered by Sensor Tower data.

The combination of a protest-driven adoption spike and an architecture-level takedown order raises a question that has surfaced repeatedly across jurisdictions: whether governments can or should restrict software tools based on their design rather than on demonstrated illegal use. The notice's reasoning, that a decentralized mesh network inherently impedes lawful interception, effectively treats the app's core technical properties as the offense.

This is not the first time a government has moved against encryption or decentralized communication tools on architectural grounds. What is notable here is the mechanism: a directive to a code-hosting platform to remove repositories, not a blocking order aimed at a running service or a specific piece of content. GitHub sits at the distribution layer. Removing a repository does not disable already-installed copies of an open-source app, nor does it prevent redistribution through forks or mirrors. The practical effect of the order, if GitHub complies, is to raise friction for future downloads and signal regulatory intent, not to shut down the network itself.

For developers building decentralized or censorship-resistant tools, the Indian government's move is a clear data point. The legal framework being invoked was not designed for software repositories, and the gap between what the statutes authorize and what the notice demands is precisely where Choudhary and SFLC.in locate their challenge. Whether Indian courts agree that content-blocking powers extend to architectural-level software removals will shape how far governments can reach into developer infrastructure, not just consumer-facing services.

The broader context is that mesh networking apps occupy an unusual regulatory position. They are not carriers in the traditional sense, nor are they content platforms. Bitchat's Bluetooth mesh design means messages hop device-to-device, never touching centralized servers that could be compelled to hand over data. Law enforcement agencies have legitimate reasons to find this frustrating. The question is whether frustration with a tool's design translates into legal authority to suppress it, and whether code-hosting platforms like GitHub become the enforcement chokepoint when the network itself has no center to pressure.

For India's protest movements, the adoption pattern tells its own story. Users reached for Bitchat and Briar specifically because internet shutdowns disrupted conventional connectivity. The same shutdown that drove protesters to mesh networking tools is the mechanism the government's notice cites as a risk: Bitchat allows communication during internet shutdowns. The notice frames this as a vulnerability. Protesters experienced it as a feature.