Hi all,
My company is using mobileIron MDM to manage the corporate apps on employee's phone. The problem is that admin can list out and control all the apps on my ipad, not just only the corporate apps. Does it violate the privacy of employee? Is there any way to limit the access of admin to our personal apps on Ipad and IPhone? Thank you very much.
iPad 2, iOS 6.0.2
I suspect because you're using a device in conjunction with work, that there's an agreement between you and your employer. They'll be able to see what apps you have installed on your device, though they can't access your data and cannot remove apps or data that were not installed via Mobile Iron.
If you don't want your employer seeing what apps you have on your iPhone, then you can probably just use your own phone, and not use it for work at all.
Thank William so much for your quick reply. I use my own phone and install some in-house apps and recommended apps of my company. The company can control both corporate apps. Ok. Why can they see and control the other apps? What I did is to installl the MDM and the profile pushed to my phone by company. Any solution to use my own phone with mobileiron and more privacy. Thank you.
They can see and control the other apps because your phone is connected to their system. If this bothers you, then don't connect it to their system. Those are your choices.
They can see that the apps are installed on your iPhone. They CANNOT see the data in those applications, if you installed them directly from the App Store. You have the privacy of your data in your non-work apps.
Keep in mind that if you're connected to a company owned network, whether it's with a phone, laptop, tablet, whatever... there is no such thing as privacy.
The company owns the network and EVERYTHING that flows through it or connects to it. They're not going to physically take your phone away from you. That's not what I'm saying... but they have the ability to do quite a bit, including completely wipe the device of all data.
If that makes you uncomfortable, then don't connect your personal device to their network. If they require you to connect, they should either provide the device themselves or compensate you for the cost of getting one specifically to connect to their system.
Thank you very much. It all makes sense now.
Hello
If you feel that your privacy is violated, then probably it is!
Your IT admin knows what apps you have installed, they can remotely wipe your device (completely, not only corprate apps and data - even your personal pictures), thay can prevent you from accessing certain WI-FI netwroks etc.
There are other solutions that are not device-centric and that provide security and IT admins with the control and security they require without ANY effect on the user experience (they protect the data at the gateway level, not the device itself). Ask your IT admin for more details.
Regards,
Dror Todress
LetMobile
There is no such thing as privacy, or a right to privacy, when you're connected to a company network or service.
The company owns the network and all the data on it, including on any privately owned devices connected to it.
If anyone is concerned by that, then they should not be using a privately owned device to connect to company systems.
It is not accurate to say that there is "no such thing as privacy, or a right to privacy, when you're connected to a company network or service."
It is true that installing a company MobileIron MDM policy on a personal device does limit privacy, both legally and practically. However, even when using personal device to connect to company services on a company network, it is usually possible to keep personal emails, text messages, and web activity private.
The extent to which the company has the right to review an employee’s personal data depends on a number of factors (e.g., the type of data in question, whether the company owns the device on which the data is stored, whether the data is related to the employee’s job, whether the company has published policies regarding personal data, etc.).
Even if the company has the legal right to store and read and employee’s personal data, it might not be able to. According to MobileIron’s website, a MobileIron MDM policy does allow access to some personal data (GPS location information, installed applications, storage use, phone number), but does not allow the company to access certain types of personal data (personal email, photos, videos, text messages and voicemail, and web activity). In short (if MobileIron is telling the truth) the bulk of the user’s personal information and data remains private.
That said, the company does have the ability (but not necessarily the legal right) to view and record any data that is transmitted using their network. However, if the data is encrypted, it may be practically impossible for the company to read it. Some protocols encrypt data by default (e.g., iMessage, SSL-enabled email protocols like SMTPS, IMAPS and POPS, certain instant messaging protocols) and others can be configured to do so. Encryption does not necessarily ensure privacy, however – for example, the company may prevent end-to-end encryption by requiring that traffic pass through a proxy server, or by blocking certain protocols entirely.
AppleSupportCommunitiesUser wrote:
...However, even when using personal device to connect to company services on a company network, it is usually possible to keep personal emails, text messages, and web activity private.
The extent to which the company has the right to review an employee’s personal data depends on a number of factors (e.g., the type of data in question, whether the company owns the device on which the data is stored, whether the data is related to the employee’s job, whether the company has published policies regarding personal data, etc.).
In most countries, the only relevent factor is whether the device connects to the company's network/systems.
Even if the company has the legal right to store and read and employee’s personal data, it might not be able to.
That's not relevant to this discussion.
If you don't want your employer looking over your shoulder, then don't connect your personal device to their systems. Most don't care about what you do on your device. Most won't ever use the power they have to monitor what you do, etc. Some will, or at least will try to monitor whatever they can.
Mobileiron and privacy
