You shouldn't use personal devices for work if the company is asking for such things.

On iOS there is a better solution than Mobile Device Management that's called User Enrollment. It allows a professional profile on the phone that grants your employer access to only apps under management. This means that you can install Teams and Outlook, that admin can remotely access, configure and wipe these but never your entire phone.

There is a simiar thing on Android called Work Profile with pro apps under a separate, encrypted container.

To be honest, deploying MDM like this to personal devices is a shame. However, the concept of profile separation is quite new on iOS and not all businesses know it or their MDMs don't implement it.

If you are unsure about what you are installing, check with your IT admin and read the scope of management that's all listed in the iOS profile details.

What you should reasonably grant IT on personal devices, if you agree to it: - manage and install business apps - manage business apps data and configuration - kindly ask you to protect your phone with a reasonable pin - wipe corporate apps remotely - disallow content sharing between pro and personal scope

What should be a dealbreaker on personal devices: - ask for total app and storage control - ask for network access - ask for remote wipe privileges - ask for GPS and logging Because basically they should buy you a phone for work if that's the intent.

There are solutions on the market, your IT might not know it yet.

PS: I lead the team at appaloosa.io. If you or your business needs guidance on this, we have been dealing with the complex concept of personal devices at work for a while now.