Anyone Have Advice How I Should Handle A Company That Wants MDM Software On My Phone, But Won't Pay For A Company Phone?

Posted by Double_N_Glenn@reddit | sysadmin | View on Reddit | 89 comments

Hello everyone. I'm not a system admin, but I do have some basic knowledge and hope you could provide me with some advice. I finished my final interview for a new job (it's non-tech related), but during the meeting, the manager said that we're required to have Teams and Outlook on our phones since we travel a lot and they need to communicate with us while in the field. However, he said that they don't pay for a company phone, and their IT teams needs to download software to our phones to prevent screenshots or copy & pasting text.

That sounded a lot like MDM or MAM software to me, so I'm a little hesitant to allow that on my personal phone. I emailed their HR department to pass on my question to their IT team, and this is how the email chain went (only including the important bits below):

ME -- "I was informed by the hiring manager that [-COMPANY-] does not provide company phones, but we are required to use our own phones for SMS, Teams, and Outlook. I just need further clarification if you monitor data and permissions through the apps themselves, or if you have a third-party monitoring software I'm required to install on my personal device. I use Outlook for personal emails as well, and want to ensure that there is 0 crossover between personal and company data."

THEM -- "Anyone that wants to have company apps on their phone will need to have ONLY our MDM called Intune Company Portal installed on their phone. If they already have an MDM on the phone, then they cannot have PD apps on that phone."

ME -- "Ok. Can you confirm if the only apps that are required on the device are Outlook and Teams? If so, I may just add an LTE tablet to my phone plan to use for work-related messaging apps."

I notice they avoided answering my question about 0 crossover. I also have a freelance side business in something unrelated to this job, but I still don't want MY customer's sensitive information compromised. My personal phone is an iPhone, but I would probably get either a cheap Android phone or tablet if I decided to accept this job.

Do you guys think a new phone or a tablet is the right choice, or am I worrying over nothing and Morozoff's Intune won't be an issue on my personal phone?

TLDR: Company I'm applying for won't pay for phone but requires Outlook, Teams, and Intune MDM on my personal phone. Should I (a) get a second phone, (b) get an LTE tablet for messaging apps, or (c) just keep using my personal phone because I'm over thinking and stressing too much about invasive permissions.