Blog | G5 Cyber Security

Phone Tracking Without MDM: What Employers Can & Can’t Do

G5 Cyber Security

TL;DR

Tracking a personal phone without a company SIM or Mobile Device Management (MDM) is tricky for employers. It’s usually limited to what the employee consents to, like location sharing through apps. Secretly installing spyware is often illegal. This guide explains what’s possible and legal, and how employees can protect themselves.

Can an Employer Track My Phone?

It depends! Here’s a breakdown of what employers *can* do without a company SIM or MDM:

1. What Employers Can Do (With Consent)

  1. Location Sharing Apps: If you’ve agreed to use an app that shares your location as part of your job (e.g., for field service work), the employer can track your location while the app is running.
  2. Email & Web Activity on Company Accounts: Accessing emails and web browsing history from company-provided email accounts or through a company browser is generally permissible.
  3. BYOD Policies: If you use your personal phone for work under a “Bring Your Own Device” (BYOD) policy, the employer might require certain security software or access to corporate data, which could include some monitoring capabilities – if it’s clearly stated in the policy.
  4. Network Monitoring: If you connect to the company’s Wi-Fi network, they can monitor your activity on that network.

2. What Employers *Can’t* Do (Without Consent)

  1. Secret Spyware: Installing spyware or tracking software without your knowledge is generally illegal and a breach of privacy. This includes apps that record calls, texts, photos, or location data in secret.
  2. Accessing Personal Accounts: They can’t access your personal email, social media, or other accounts unless you give them permission.
  3. Intercepting Private Communications: Reading your text messages or listening to your phone calls without a warrant is illegal.

3. How Tracking Might Happen (Even Without MDM)

Here are some less obvious ways employers might try to track activity:

4. How to Protect Yourself

  1. Read Your BYOD Policy: Understand exactly what monitoring is allowed if you use your personal phone for work.
  2. Be Careful with Apps: Only install apps from trusted sources (e.g., the official App Store or Google Play Store). Check app permissions before installing.
  3. Use Strong Passwords & Two-Factor Authentication: Protect your accounts with strong, unique passwords and enable two-factor authentication whenever possible.
  4. Be Wary of Phishing Emails: Don’t click on links or open attachments from unknown senders.
  5. Use a VPN (on Public Wi-Fi): A Virtual Private Network encrypts your internet traffic, making it harder for others to monitor your activity.
  6. Review App Permissions Regularly: Check which permissions apps have and revoke any unnecessary ones. On Android: 
    Settings > Apps > [App Name] > Permissions

    On iOS:

    Settings > Privacy > [Permission Type] > [App Name]
  7. Consider a Separate Phone: If you’re concerned about privacy, use a separate phone for work.

    8. 5. Legal Considerations

    Laws regarding employee monitoring vary by location. It’s best to consult with an employment lawyer if you have concerns about your employer’s tracking practices.

    6. What About Location Data?

    Even without spyware, employers can sometimes get a rough idea of your location through:

Exit mobile version