What information can my organization see when I enroll my device?

Your organization cannot see your personal information when you enroll a device with Microsoft Intune. When you enroll a device, you give your organization permission to view certain pieces of information on your device, such as device model and serial number. Your organization uses this information to help protect the corporate data on the device.

What your organization does not see:

  • Calling and web browsing history
  • Email and text messages
  • Contacts
  • Calendar
  • Passwords
  • Pictures, including what's in the photos app or camera roll
  • Files
  • Additionally, for corporate-owned devices with a work profile:
    • Apps and data in your personal profile
    • Phone number

What your organization can always see:

  • Device model, like Google Pixel
  • Device manufacturer, like Microsoft
  • Operating system and version, like iOS 12.0.1
  • App inventory and app names, like Microsoft Word. On personal devices, your organization can only see your managed app inventory. For corporate-owned fully managed and dedicated devices, your organization can see all of your app inventory. For corporate-owned devices with a work profile, your organization can only see the app inventory in your work profile.
  • Device owner
  • Device name
  • Device serial number
  • IMEI

Note

Organizations cannot see all app inventory on Android Enterprise fully managed devices, corporate-owned work profile devices, and dedicated devices.

Note

An app is considered managed app when installed in one of the following ways:

  1. A user installs it from Company Portal app after it is published as available by an Intune admin.
  2. The app is published as required by an Intune admin and is installed on the device.

What your organization might be able to see:

  • Phone number: If you're using a corporate-owned device (excluding corporate-owned work profile), your full phone number is visible to your organization. If you're using a personal device, the last four digits of your phone number are visible. You can see the ownership type for each individual device on the Intune Company Portal > Device Details page.
  • Device storage space: If you can't install a required app, your organization might look at your device's storage space to figure out if space is too low.
  • Location: For corporate-owned devices, your organization can see the location of a lost device. For personal devices, your organization does not see the device location. Visit the Apple iOS documentation to learn more about supervised devices.
  • App inventory details: If your organization uses Mobile Threat Defense, they will be able to view details about the apps that are on your iOS device. Find out more about Mobile Threat Defense. Otherwise, for personal-owned devices, your organization can only see your managed app inventory. For corporate-owned devices, your organization can see all of your app inventory.
  • Network information: Some information about network connections for Android devices may be available to your organization support. For example, if your organization requires devices to remain within a certain building, your device would identify the network where it is connected.