MDM Profile details

Be careful when you’re asked to install a profile.

MDM Profiles allow remote administration, including options to modify settings, disable your ability to back up the device, as well as the remote wipe feature, which allows the administrator to erase all data from your phone (not just work stuff, but also personal things: photos, apps, messages, and basically everything else).

Besides, profiles can enforce your device to trust certain resources (websites, for example)—even if they’re not that secure and wouldn’t be trusted under normal circumstances.

MDM is a convenient way to manage devices that a company distributes among its employees. But I wouldn’t be comfortable with enabling my personal device for remote administration. All basic features—email (including Exchange accounts), calendars, and more—can be set up without MDM.

L3V wrote:

How can I understand what exact privileges I will grant to IT team via profile?

You should ask your IT department. The boilerplate is pretty scary but it may be just that, boilerplate. My previous employer had similar scary warnings. They weren't even remotely interested in my personal data, though.

L3V wrote:

They actually said that I shouldn't worry about this, but it is not comfortable for me to rely on their words only.

Hope to get some info from uninvolved side :-)

Unfortunately, they are the only ones who know what the profile is set to do. My feeling was, if I don't trust my employer, I shouldn't be working for them in the first place. They already had my name, SSN, birth date, names of relatives and a drug test. It's a decision you're going to need to make for yourself.

I did refuse to follow my district manager on Instagram. I wonder if that contributed to my being laid off?