Installing apps for work on your personal phone?

[Foliage]

Id ask for a company phone.

http://www.theguardian.com/technology/2016/feb/01/...

http://www.telegraph.co.uk/news/uknews/defence/106...

Not bothered about the NSA but more about apps using the data I pay for without my permission.

I think the challenge is that my smartphone is mine, paid for by me for my convenience

[dublove]

I use my own personal phone for work. I don't want two phones.

I'll use my own phone, you pay my bill. Job done.

[devnull]

The other issue is that MDM apps are usually terrible - my workplace is trying to force Citrix WorxHome, which is frankly disastrous in terms of UI and features.

Push comes to shove, I don't mind having MDM on it - what DOES piss me off is the mandatory massive complex password they enforce - find for my iPhone as the touchID is considered secure, so I don't mind. But it is a different matter on my Pixel C android tablet - i don't want to type the equivalent of 'ihatethisMDM solution1234screwthecmoapny' everytime I want to unlock it.

[Don]

Mr Will said:

bhstewie said:

We can give you a phone just to run that app - do you want to carry two phones all the time?

Yes, yes I do. Because then I can turn one of them off and leave it at home when I'm not working.

If it is just for an authentication token then a fob is fine. You aren't getting access to my phone any more than you are getting access to my car, my living room or my home PC.

I agree with this. A work phone will have work systems on it, it will have remote wipe, it will access the Company's VPN and absolutely everything that goes in and out of it is subject to the Company's scrutiny.

If for one moment any of you think that IT can't see exactly what's on your Company computer, on your Company phone and what's been in and out of it in excruciating detail then you are either mad, or never configured a UTM. The only reason IT aren't reporting minor indiscretions is because they don't care. Make them care and you're right up st creek in a hot minute. UNLESS your Company phone ONLY does Company things - and all that social media chit-chat and pr0n viewing goes on your personal device that they don't have access to.

And if you connect your personal device to the Company WiFi IT can see everything too!

Nah. Keep work and personal well apart.

A huge benefit is that when you have finished communicating with that IT recruitment Company and get a nice new job your personal IT infrastructure will go on working seamlessly, as will that of your old Company and your new one.

[greggy50]

I would expect a work phone for specific apps I use airwatch for my email and it removes functionality if ran on my personal phone so requested a new one and got an S6.

Annoying thing is I now have 2 Samsung S6 in the same colour which can be a tad confusing...

Personally though like having a work phone and personal as the work phone can then be switched off at the weekend!

[Troubleatmill]

klootzak said:

fk me, this is a thread for glistening examples of people who will never be more than employees.

And if that's thick with judgement, so be it.

The only point to be getting narky is if your employer wants the ability to remote wipe your data from your own phone.

Anything else is trivia.

k

I disagree.

1/ You lose the ability to upgrade IOS at your choosing. Your employer will make you sign a a nice bit of paper which you agree to this.
This is my device. I will decide when I upgrade to the next version of IOS. IT may take several months to "bless" the upgrade

2/ MDM can easily track your whereabouts. Most companies do consider that unreasonable. But they can do it.
The company has no right to track me. If I am issued with a company phone. I can switch it off and on - as I see fit.

3/My personal data can we wiped from the device. Not happening.

4/As company data would be on my phone.... data transmission eats up my data allowance.

5/Submitting my bill each month highlighting what calls are business and personal. Not happening.

6/I am self employed - not an employee. If a client want me to put their software on my laptop/ phone etc... I ask them to provide the laptop/ phone etc. I am not their hardware freebie leasing company

7/ You will have a better quality of life not looking at work emails in the evenings , weekends etc.

[marshalla]

Troubleatmill said:

2/ MDM can easily track your whereabouts. Most companies do consider that unreasonable. But they can do it.
The company has no right to track me. If I am issued with a company phone. I can switch it off and on - as I see fit.

Or as company policy dictates, in accordance with your contract of employment - which may include a right to track you for "your safety" or somesuch.

[andy-xr]

As an afterthought to an earlier post, and seeing as people keep bringing it up....does noone have remote wipe on their own phone?

I have it set on mine incase its lost or stolen and it backs up on WiFi to Google drive

[marshalla]

Actually - something's just struck me (and I should have thought about this long ago).

Since company data and personal data can't be kept separate (hence the somewhat nuclear operation of a remote wipe), how is company data kept out of personal backups ? and how does that affect compliance with DPA and various other regulatory requirements ?

[poing]

I suspect I'm in the same job as Stewie and have been dealing with this for a few years. The answer really depends how big the company is, 20 people or less then it's probably fine but the bigger you get the more you should be willing to provide suitable equipment for the staff and especially if you have a particular requirement as a company.

We allow people to install work email on their own phone, this does give us the ability to remotely wipe their phone though. Not a single complaint from any staff yet. They do forget to tell us when they have a new phone though!

We allow people with company phones to install personal apps, this is because the company phone is their only mobile for over 90% of the people wth them. The only exception is where a particular department head requests certain things are blocked.

If we required people to use an app then we would provide a phone but if they said they would rather use their own we would let them with the proviso that we can remotely wipe it.

All the senior staff have company mobiles but only a few of us have 2 phones, personal and work. I get grief from a couple of directors for this because I'm not contactable in an emergency due to taking my personal phone with me rather than the work phone. I prefer the separation of work and personal stuff and my work phone changes frequently due to testing new phones all the time. Each phone has very different apps to suit it's particular usage so it's far easier to have both. Same with tablets for all of the above.

[Dog Star]

I work for a gaming company who are quite simply brilliant, love my job, am very loyal to the company. I've installed quite a bit of work stuff on my phone - doesn't bother me. (I have an iPhone 6 personal and iPhone 6 company mobile, I don't tend to bother with the company one unless I'm overseas. I'm not carrying two phones)

[plasticpig]

If the employer in question was happy for the apps to run on a rooted phone with custom rom the I would be OK with it.

[ClockworkCupcake]

Allanv said:

As a contractor I am asked to use my own phone for some things but this latest contract wanted me to have email / VPN authentication software (I will put the VPN software on my phone) and a few others so asked them for a company mobile.

As a contractor you already have a company phone, I would imagine. And maybe a personal phone as well (I use a dual SIM phone personally, so I can have a company number and a personal number). What you mean is that you are expecting the client to lend you one of their phones.

If the client won't, then buy a cheap phone for their use and then use the fact that your company supplied equipment as evidence of being outside IR35.

[Don]

andy-xr said:

As an afterthought to an earlier post, and seeing as people keep bringing it up....does noone have remote wipe on their own phone?

I have it set on mine incase its lost or stolen and it backs up on WiFi to Google drive

Anyone with an iPhone has that capability unless, for some weird reason, they refuse to initialise iCloud.

Mine backs up, has remote wipe, all those things. And I'm in charge of it, which is the way I like it.

[Mr Will]

andy-xr said:

As an afterthought to an earlier post, and seeing as people keep bringing it up....does noone have remote wipe on their own phone?

I have it set on mine incase its lost or stolen and it backs up on WiFi to Google drive

I have the ability to remote wipe my phone. Nobody else.

I'm pretty sure my employer would say the same if I wanted to remote wipe any of their devices.

[andy-xr]

Mr Will said:

andy-xr said:

As an afterthought to an earlier post, and seeing as people keep bringing it up....does noone have remote wipe on their own phone?

I have it set on mine incase its lost or stolen and it backs up on WiFi to Google drive

I have the ability to remote wipe my phone. Nobody else.

I'm pretty sure my employer would say the same if I wanted to remote wipe any of their devices.

So the issue really is, who's doing the remote wipe and how can you separate out personal and work data so not all of it is wiped. But the remote wiping is generally a good plan to have? So something like this might work instead; https://www.android.com/work/

[crofty1984]

I have bria on my personal phone, so I can voip from my desk phone if I'm traveling.

[drivin_me_nuts]

There are companies the talk of creating an 'encapsulated environment' in which their softeware and data is held and do say that they can remove their components remotely without affecting the rest of the phone.

Can someone who knows be so kind as to answer this question; is it the case that in order to use the native API's, you have to grant access to such things as gprs to the app via the native permissions and can hence, turn them off on your phone.

[Mr Will]

andy-xr said:

Mr Will said:

andy-xr said:

As an afterthought to an earlier post, and seeing as people keep bringing it up....does noone have remote wipe on their own phone?

I have it set on mine incase its lost or stolen and it backs up on WiFi to Google drive

I have the ability to remote wipe my phone. Nobody else.

I'm pretty sure my employer would say the same if I wanted to remote wipe any of their devices.

So the issue really is, who's doing the remote wipe and how can you separate out personal and work data so not all of it is wiped. But the remote wiping is generally a good plan to have? So something like this might work instead; https://www.android.com/work/

The remote wipe issue is one of control, yes. They are welcome to wipe anything on the devices that they own, but I don't want to risk them wiping anything on mine. Separate walled gardens might work, but I still don't want the added complexity on my phone.

I'm perfectly happy with a work blackberry for calls/emails/VPN token and my own smartphone for my personal life. No messing about with security or privacy issues, no claiming back parts of phone bills, no problems if/when I switch jobs and no intrusion on my personal life outside of work hours. It's simple, it's easy and it's a small price to pay.

Even if I was forced in to a BYOD program I would still have two phones, something cheap and reliable for work and something nicer for me.

[bitchstewie]

poing said:

I suspect I'm in the same job as Stewie and have been dealing with this for a few years. The answer really depends how big the company is, 20 people or less then it's probably fine but the bigger you get the more you should be willing to provide suitable equipment for the staff and especially if you have a particular requirement as a company.

Oh we'll provide it where it's required, and as I think I said earlier where it's something with intrusive rights (like wipe) I'd welcome anyone to ask whatever questions they have, and if they're not satisfied we'll provide a device.

But using Google Authenticator is an example of an app where personally I can think of zero reason anyone sensible would/should insist on a company device - yet seemingly some would insist on exactly that