Personal photos on a work phone: what your employer can see
A work phone is managed by someone else. Your photos on it live by their rules.
In short
A managed iPhone lets your employer control settings, install apps and, on company-owned devices, erase the whole phone. Apple’s documentation says device management cannot view personal messages, mail, contacts, call logs or Safari history, and can see the phone’s location only by putting it in Managed Lost Mode, which locks it with a visible message. The simplest way to protect personal photos is to keep them on a personal phone.
Key takeaways
- Check Settings › General › VPN & Device Management to see what is managed.
- Company-owned phones can be erased remotely, photos included.
- A personal phone is the cleanest separation.
Is your phone managed?
Look at the top of the main Settings screen: a supervised iPhone, usually one your organization owns, says so there. Then go to Settings › General › VPN & Device Management and tap any profile to see what it changes. If there is no profile, no device management profile is installed.
What device management can do
It depends on how the phone was enrolled. Apple’s deployment guide describes the main methods:
- On every method, the organization can require a passcode, install and manage apps, and remotely erase the data it manages.
- With any method other than User Enrollment, it can also see the list of all installed apps, the serial number and phone number, and erase all content and settings — your photos included.
- On supervised phones, it can restrict features such as AirDrop and filter or route internet traffic.
What Apple says it can’t do
Apple lists capabilities that device management does not have under any enrollment method: querying the device location, collecting how often you use apps, and viewing personal calendars, contacts, mail, notes, reminders, iMessage or SMS messages, FaceTime and call logs, or Safari history. An administrator can see the location only by turning on Managed Lost Mode, which locks the phone and shows a message on the Lock Screen.
Photos aren’t named in that list either way. Ask your IT department what their policy covers, and check which apps — including company apps — have access to your photos in Settings › Privacy & Security › Photos.
Bring-your-own-device is different
If you use your own iPhone for work, your organization may use User Enrollment. Apple says that with it, IT can manage only the organization’s accounts, settings and data, never your personal account, and can’t erase the whole phone. If you have a choice, it is the option that keeps your personal side most separate.
Keeping personal photos apart
- Keep personal photos on a personal phone where you can.
- Remember that a work phone is handed back when you leave, and may be erased before you do.
- Review which work apps can access your photos, and turn off access they don’t need.