Neil Kandalgaonkar
@feoh This is an awful situation but just to clarify some things
It's not technically required to give the company that much power over your personal iOS devices. They could have asserted much less control and still been secure.
I have worked for a financial institution where I brought my own iOS device. When I was offboarded, they could wipe only apps associated with the company. I had to reinstall my Gmail for personal use and re-login, but was otherwise fine.
Billy Smith
This is the right way to do things.
The bank's IT department will be liable for all of her extra expenses, and the Bank's HR department should be involved, as well as the bank's insurance company.
No proper off-boarding procedure, which means that they cannot confirm that everything was done properly.
If the banks IT department are screwing up like this, then where else are they failing to do their job.
Report them, and act as whistleblowers to the insurance company.
Rich Felker
@BillySmith @neilk @feoh This 👆 is the way to handle it. Hope she had backups of anything irreplaceable. That kind of behavior by an employer, especially a bank, is grossly unacceptable.
Rich Felker
@BillySmith @neilk @feoh It's also completely unacceptable that Apple allows this. There should be ABSOLUTELY NO WAY to activate this level of MDM on a personal device. The only way to do ut should be if the device was initially setup as a corporate fleet device and never provisioned before. Liability for damages should be on Apple too for providing the backdoor & honoring it.
Billy Smith
It's correct legal advice in the UK.
It was the procedures I learned about from a couple of friends who worked in the Cty Of London.
While they had standing, they didn't have the resources, but the bank's insurance did. :D
It's why some of the insurance companies covering the finance industry in the City, require the insured company's staff to be provided with devices-for-work-only, as it reduces their risks.
@feoh Talk with your lawyer, as you may have a good case.
Neil Kandalgaonkar
@BillySmith @feoh Even if this is correct legal advice (I have no idea), having standing to sue a giant company is basically the same as having the right to bet $100,000 of your money on black at Vegas
Their insurance and compliance department is probably why they did this. Wipe entire device and you are safe from the employee doing dumb shit like saving passwords in the Notes app.
It is sad that employers have such coercive power to ask this of employees. I don't know how to fix it
apfeiffer42
@dalias @BillySmith @neilk @feoh
Also when you try to setup an “exchange mail account” on a personal (non-MDM’d) iPhone or iPad, you get asked if it’s ok that the device can be remotely wiped by “an administrator” — so maybe even someone back in the US asking a MS employee to do that, for whatever reason they invent.
So, no business email for me on my private devices.
Rich Felker
@apfeiffer42 @BillySmith @neilk @feoh That's entirely Apple's fault that it's possible. Asking does not make it consent, abd there's no legitimate reason for it anyway except power tripping.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.