What access does my company have to my personal iPhone?

[Shirasaki]

Here’s what an MDM is capable of if it’s hacked

Students scramble after security breach wipes 13,000 devices

Mass wiping occurs after hack of mobile device management platform.

arstechnica.com

This is exactly what I fear, and on Microsoft InTune, it does have the command to wipe a device. I think I will give it a shot for one of my iPhone that’s destined to be wiped anyways.

 

[klky]

In no universe would I allow my personal phone be used for work, especially if it meant installing various software, giving access etc. It's just a bad idea.

By “giving access”, I also mean having to hand my personal phone over to company IT when something work related isn’t working properly. And he spills his coke all over it. No thanks.

 

[bollman]

I work in IT. If you would come in with your private phone, having problems, I would not want to touch it with a 10 foot pole. We do NOT touch personal devices or computers.

This discussion is going nowhere.
Strong opinions and "knowledge" derived from FUD and desinformation leading to not believing the facts.
I'll keep this in mind in future discussions on MR.

 

[laptech]

There is a number of naive people posting here quoting the MDM saying it does not do this and it does not do that. Tens of thousands of companies/businesses are caught lying about what they do. Apple, Microsoft, Google, Instagram, Facebook, TikTok, Whatsapp, Ford, Vauxhall, banks (to many to name), Insurance companies (too many to name) and the list goes on and on, have all been caught out lying regarding saying one thing and doing another.

How many times have we seen companies being taken to court either by their employees or by government bodies because they have issued documents/procedures/policies/terms and conditions telling employees and others what the company will not do but then is found to have lied and done the complete opposite.

Those notices from Intune about what they don't do is not worth the digital screen time it's displayed on because companies will lie and continue to lie until they are found out.

If people believe that MDM's are true to their word and they do not collect data from devices then that is your prerogative but based on past years of media articles on companies being exposed as liars I choose not to believe everything I read (about companies MDM policies).

Edited so people cannot twist my words regarding line 'about everything I read'

 

[mattoruu]

There is a number of naive people posting here quoting the MDM saying it does not do this and it does not do that. Tens of thousands of companies/businesses are caught lying about what they do. Apple, Microsoft, Google, Instagram, Facebook, TikTok, Whatsapp, Ford, Vauxhall, banks (to many to name), Insurance companies (too many to name) and the list goes on and on, have all been caught out lying regarding saying one thing and doing another.

How many times have we seen companies being taken to court either by their employees or by government bodies because they have issued documents/procedures/policies/terms and conditions telling employees and others what the company will not do but then is found to have lied and done the complete opposite.

Those notices from Intune about what they don't do is not worth the digital screen time it's displayed on because companies will lie and continue to lie until they are found out.

If people believe that MDM's are true to their word and they do not collect data from devices then that is your prerogative but based on past years of media articles on companies being exposed as liars I choose not to believe everything I read.

A little funny that “based on past years of media articles” you “choose not to believe everything [you] read”.

Basically: Based on everything I read, I don’t believe everything I read. Which… I suppose makes does sense. It’s just a little funny how you phrased that last sentence.

News has a (understandable) tendency report on wrongdoers doing wrong. Which also makes sense. But that sort of coverage can lead one to believe that everything and everybody is terrible and nothing and nobody can ever be trusted.

There are rarely news articles about companies just following the rules as they should. Those companies certainly exist, but you don’t see media headlines saying:

“Company Does Exactly What It Says. Everyone Is Happy.”

😂

 

[mikes79]

One of my jobs is being an MDM admin for about 600 Apple devices. Coming from someone who administrates an MDM, I too would never install an MDM profile on my personal devices. It is true that that the personal and work data can be separated if the MDM is setup perfectly, but I'm sure it won't come as a surprise to anyone here. most aren't setup perfectly.

that said all work purchased devices, enroll in the MDM< no matter what. That said I would never dream of asking an employee to enroll a personal device in the MDM. bad idea.

 

[4sallypat]

One of my jobs is being an MDM admin for about 600 Apple devices. Coming from someone who administrates an MDM, I too would never install an MDM profile on my personal devices. It is true that that the personal and work data can be separated if the MDM is setup perfectly, but I'm sure it won't come as a surprise to anyone here. most aren't setup perfectly.

that said all work purchased devices, enroll in the MDM< no matter what. That said I would never dream of asking an employee to enroll a personal device in the MDM. bad idea.

100% agree !

I also manage 4500 MDM Apple devices where I work.

We use Mosyle MDM for all the iPads, Macbooks, Apple TV, iPhones as they are all enrolled automatically thru Apple's DEP.

We have a MIM (man in the middle) cloud content filter that looks for "bad stuff" and gets reported automatically to the authorities.

My MDM issued iPhone, iPad, Macbook, ATV are never used outside of work.

My personal iPhone, iPad, Macbook, Studio Mac are never connected to my work's MDM.

 

[Queen6]

I've worked globally for many significant corporations. Have always always had a work phone & private phone, travelled with a cooperate notebook and personal Mac for good reason. Depending on local legislation (can be abused) granting others admin access your devices is an open door so be warned...

I'm a consultant these days, if a client want's control of the device they have to provide or I build the cost of the HW into the contract. Allowing such a level of access is the same as posting your banking details on the back of a postcard and hoping nothing untoward happens.

Plays both ways mind, once IT challenged me that my Mac was tagged into the corporate network. Just said prove it, called me out. Operations manger said he generates significant revenue, you are a cost end of story. Truth being the Mac was on the corporate network as I could get more done faster, as once you in, well your in. The company Dell was a POS that was more of a hindrance to getting things done. IT knew a system was on the network, but had no clue how, why or where, triggered them a little more, set up and ran a desktop on Solaris what else are lunchbreaks for LOL...

Q-6