Installing apps for work on your personal phone?

[bitchstewie]

Do any of you work a company that has asked you to install an "app" on your personal phone in order to be able to use the service that the app gives access to?

I'll use something such as SalesForce as an example, but essentially something where there shouldn't be any reasons to feel "wary" of doing so.

If so, did you? If you didn't, what were the reasons please?

Be good for this to stay here please as I'm after feedback from regular Joe vs. people who may go out their way to look at the computer forum.

[bitchstewie]

To be fair Salesforce was a bad example as there is company data involved. Think something such as the Google Authenticator app.

[bitchstewie]

Yes if things get intrusive I'm totally in favour of the employee simply being able to say "No, give me a company phone if you want me to do that".

With something like a simple Google Authenticator type app I'm trying to gauge feedback because whilst I get that people have a right to say "No, it's my personal phone", it's so unobtrusive I'm struggling to think of a reason anyone should have an issue and refuse, other than simply because they can.

[bitchstewie]

OK some interesting responses which is good

So, devil's advocate:

Let's use Google Authenticator which is an app, doesn't need to use the internet or any data allowance, might consume a small amount of battery, and you need to generate and enter a code each time you login to a given website.

You wouldn't put that on a personal phone because "It's work" - fair enough.

We can give you a phone just to run that app - do you want to carry two phones all the time?

We can give you a tablet just to run that app - do you want to carry a tablet all the time?

We can give you a hardware token that you have to carry all the time - you want to carry a fob all the time?

I'm interested in the mindset if I'm honest as I don't see it as a privacy issue or a control issue because it's not as if it's a solution that gives us control of your phone, visibility of anything on it, ability to wipe it, it's not something where we're blasting you with notifications or can "disturb" you via your personal phone, so if I'm honest I'm a bit confused that people seem to want to be carrying yet more kit

[bitchstewie]

klootzak said:

Actually, no I don't mind. It's not a big deal. Really. The data is trivial and if it means they're happy to use their own devices at work then I'm the winner.

That said, if they want to be aholes about their "rights" I'm happy to make a judgement about their career opportunities.

Sad, for sure, but true.

k

Not sure it's how I'd phrase it but I kind of agree tbh. You'd think common sense would enter into it somewhere - which goes on both sides regards things like personal usage on company devices.

[bitchstewie]

If it was something that gave us wipe capabilities (and we do let people use personal phones for some stuff where this is part of the permissions needed) we're very clear about what we will do, what the app can do, and if people aren't happy we'll gladly supply a company device.

We're not aholes

[bitchstewie]

poing said:

I suspect I'm in the same job as Stewie and have been dealing with this for a few years. The answer really depends how big the company is, 20 people or less then it's probably fine but the bigger you get the more you should be willing to provide suitable equipment for the staff and especially if you have a particular requirement as a company.

Oh we'll provide it where it's required, and as I think I said earlier where it's something with intrusive rights (like wipe) I'd welcome anyone to ask whatever questions they have, and if they're not satisfied we'll provide a device.

But using Google Authenticator is an example of an app where personally I can think of zero reason anyone sensible would/should insist on a company device - yet seemingly some would insist on exactly that

[bitchstewie]

poing said:

Most company MDM software allows a selective wipe which should take care of that, it's ability varies though. I might or might not have accidentally pressed the button which said full wipe device on a staff members personal phone. aperboy:

Beyond human mistakes there can also be system issues and I'd rather my phone didn't suddenly reset itself to factory without me expecting it.

I don't know of an MDM that doesn't have a full wipe option though, so I think you're always dependent on trusting your IT team not to do it rather than them not having the technical capability to do it, that's in the context of an MDM though.

It's an interesting time at the moment, as a business we have to ensure our data is secure, the flip side is that there are a lot of employees who want to use their own phones for stuff like email so it's how we ensure we're covered whilst not wrecking all that goodwill.