Privacy 

Your privacy is important to us.  When enrolling your personal device in Microsoft Intune, every effort is made to respect your privacy and the security of your personal information.  The information below highlights some of the important features of Microsoft Intune designed to keep you protected and informed of what we know about you, your device, and your information.

  • The Company Portal app is installed on your device to allow for enrollment.   
  • You still own and control your device and all of your personal apps, emails, texts, photos, etc.  
  • You have the ability to un-enroll at any time.
  • Personal apps are kept separate from work apps and cannot be managed, viewed or monitored. 
  • Privacy controls are built in to Microsoft Intune to restrict the company from being able to see personal information or breach your privacy.  
  • Just as if you lost your corporate laptop, we need to know so we can secure sensitive corporate data.
  • If the device cannot be found, we will remotely remove any corporate data as soon as possible.
  • All mobile devices which access corporate resources at Baptist Health will be required to use a minimum 4-digit PIN for security purposes.

Personal Apps are not tracked

The image above shows an employee phone with personal applications installed, such as Facebook, Instagram, and Netflix. The device also has business applications installed by Microsoft Intune, such as email, Epic Haiku.

Business Apps are managed by IT

The image above shows the same device in the Microsoft Intune administration console.  Notice that the device shows only the apps sent to the device by IT.  Facebook, Instagram, Netflix and more are not shown and are unknown to IT since they are personal apps installed by the employee.

Your location is not tracked

The "Locate Device" option is greyed out for personal devices.  Although you will be prompted for location/GPS permissions when enrolling, rest assured, your location is not being sent to Microsoft Intune or the IT department.  

A deeper look at what your organization can see on your device

Things your organization can never see

Calling and web browsing history

Email and text messages

 Contacts

Calendar

Passwords

Pictures, including what's in the photos app or camera roll

Files


Things your organization can always see

Device owner

Device name

Device serial number

Device model, such as Google Pixel

Device manufacturer, such as Microsoft

Operating system and version, such as iOS 12.0.1

Device IMEI

Managed app inventory and app names, such as Microsoft Word