India makes Aadhaar more ubiquitous, but critics say security and privacy concerns remain

India is intensifying the integration of Aadhaar, the world's largest digital identity system, into daily life with the launch of a new app and an offline verification system. This initiative, announced by the Unique Identification Authority of India (UIDAI) in January, raises significant questions regarding security and user consent. The newly developed Aadhaar app enables users to verify their identity without needing real-time access to the central database. Instead of sharing comprehensive personal information, individuals can provide minimal details, such as confirming their age, to various services including hotels, workplaces, and payment platforms. The existing mAadhaar app will continue to be available alongside this new offering for the time being. In addition to the app, UIDAI is expanding Aadhaar's presence in mobile wallets, with upcoming integrations planned for Google Wallet and discussions for similar features in Apple Wallet, building on existing support for Samsung Wallet. The app is also being promoted for use in law enforcement and hospitality sectors. For instance, the Ahmedabad City Crime Branch has implemented Aadhaar-based offline verification with its PATHIK platform, designed for hotels and guest accommodations. UIDAI officials introduced the app as a way to enhance user control over personal data sharing through consent-based offline verification, aiming to eliminate the need for photocopies and manual checks. While the app was officially launched last month, it had been undergoing testing since earlier in 2025. Initial data suggests that the app quickly gained popularity, surpassing the older mAadhaar app in download numbers. Installations of Aadhaar-related apps rose dramatically, from nearly 2 million in October to almost 9 million by December. With over 1.4 billion identity numbers issued and approximately 2.5 billion authentication transactions processed each month, Aadhaar already operates at an unprecedented scale. The shift towards offline verification extends this infrastructure, transforming Aadhaar from a backend verification tool to a more visible part of everyday interactions. UIDAI officials emphasized that this move addresses longstanding risks posed by physical copies of Aadhaar documents, which have often been mishandled. However, the expansion coincides with new regulatory changes that allow certain organizations to verify Aadhaar credentials without accessing the central database, raising alarms among civil liberties advocates. Critics, including Raman Jit Singh Chima from Access Now, argue that launching the app before the establishment of India’s Data Protection Board poses significant risks. Chima cautioned that the government should have waited for an independent review process before expanding Aadhaar's use. Legal experts like Prasanth Sugathan from SFLC.in highlight ongoing issues with the Aadhaar system, including inaccuracies and inadequate redress mechanisms that disproportionately impact vulnerable groups. They express concerns over how the new app will manage data security and prevent breaches. Civil society groups warn that the offline verification system may lead to unauthorized private-sector use of Aadhaar, which has been previously prohibited by the Supreme Court. They argue that the consent provided in such contexts is often misleading, particularly in environments like hotels or housing societies. As India deepens its reliance on Aadhaar, the implications for privacy and data protection continue to unfold, drawing interest from both domestic and international observers eager to explore the potential of large-scale identity verification.