Employer Access

**GAFF371** · 07-20-2012, 05:00 PM

Hey everyone, new to the forum as well is my new Razr Maxx. I have been googling all day and can't find an answer to this question so I signed up to post here. While setting up my phone I decided to access my work email through exchange email on the default android e-mail app. (Info was the same as what I use to log in via OWA). In the past I have always used a rule to auto forward work email to my gmail account. I am wondering if using the exchange email gives my employer access to my phones contact list, text messages, personal email, and web history/bookmarks. Again this is my personal phone, I pay the bill, no reimbursement for it or anything like that. All I did was simply configure an e-mail address using exchange and it syncs with my phone. Thanks for any help you guys can give me!

**1414H77** · 07-20-2012, 06:13 PM

Yes, your employer would have access. Using the phone on exchange it is just syncing using ActiveSync with the exchange server. What you have on both places is the same- the same emails, contacts, calendar, tasks, etc. Also, autoforwarding as you did in the past also does not protect your email from your employer. It still comes and goes through the corporate exchange server and the emails that were forwarded are there.

One more word of warning. Even if you delete your emails on the exchange server and can't see them does not mean they are not still there. Most companies auto archive all emails due to internal policy, plus many employers have to do so for various federal laws.

**GAFF371** · 07-20-2012, 06:22 PM

Thanks for the info. I figured that they would be able to see anything I send on my work email. What I am wondering is what about my gmail, my web browsing, my text messages. For instance if I am getting email from their server, are they able to basically get into my phone and read a conversation between me and my wife or pull up history from my browser if I have checked my bank account info, etc.? Don't really have much to hide however I don't feel it is any of their business either. Needless to say the convenience of having email pushed to my phone directly is not worth giving up my personal privacy. Maybe I am just over thinking this. I have checked email from browser via OWA in the past so I guess that is basically the same thing as that correct?

JQ · 07-20-2012, 06:45 PM

This would depend on how your work exchange server is set up. With ours it only sync's email, calender, and tasks. It does not sync contacts. Our IT department set it up this way to keep our personal contacts separate. On the other hand if you go to compose an email and start typing in the "to" field it will bring up the global contacts list, however your work contacts will not show up in your phones contacts list. Check with your IT department to verify how they have it setup.

**GAFF371** · 07-20-2012, 07:15 PM

Ok. Not to beat this to death but sounds like you guys are saying they can see anything as far as email goes. I am more worried about say they can see my browser history and I just checked my mobile banking and now they know how much money I have, what I spend with my credit card, etc. Or be able to view private conversations in my SMS. I guess I am kind of answering my own stuff here, the fact that I am even worried about it makes me 1) a paranoid person and 2) I should probably just delete the exchange access and check it from the browser via OWA

**Schufly** · 07-20-2012, 08:52 PM

Generally, any time you agree to accept the terms of use involved with a corporate email system, you hand over any expectation of privacy on the device you access that account from. Can they access your personal contacts and texts? Hell yes. Many wouldn't. Most employers don't have the time or reason to do so. I think it's best to keep the work and private life separate. Don't give them the opportunity to use your personal interweb travels against you.

**1414H77** · 07-20-2012, 09:13 PM

Originally Posted by GAFF371

Ok. Not to beat this to death but sounds like you guys are saying they can see anything as far as email goes. I am more worried about say they can see my browser history and I just checked my mobile banking and now they know how much money I have, what I spend with my credit card, etc. Or be able to view private conversations in my SMS. I guess I am kind of answering my own stuff here, the fact that I am even worried about it makes me 1) a paranoid person and 2) I should probably just delete the exchange access and check it from the browser via OWA

You miss the point. Exchange is on a server. OWA is still checking email on the Exchange server. OWA does NOT give you any protection.

**Praggles** · 07-21-2012, 04:36 AM

Once you active sync they can see all your emails on that account. Depending on your companies size no one will check them until they have to though. You'll probably be gone before they realize you are job searching but they will find out if you e mailed a secret to a competitor...just use common sense.

Can your company see your browsing history or texts from your phone? Someone would have to explain to me how that could work...I really doubt most would be able to (unless they employ extraordinary resources I.e. you work for Google or NSA) or could. I think that info travels a separate stream and is only available to God, Carrier, Google and the FBI/DARPA, Beijing and Kremlin.

Sent from my DROID RAZR using Android Central Forums

**kingmeow** · 07-21-2012, 08:21 AM

Does your work have webmail? If so, check your work e-mail that way. That's what I do with Dolphin. I want to keep things separate.

**bzxzlg** · 07-21-2012, 09:26 AM

Having done this for years, something else to consider - you're using your personal phone for your professional needs and are therefore now allowing the company to remotely lock and/or WIPE your phone. This is kind of a bonus depending on how you look at it since the average user doesn't lock their phone - you're now subject to your comany's administrator's policies - ie locking your phone and auto-wipe if password mis-typed x number of times. Further, just be smart about it - right? If you wouldn't say it out loud and write it down on paper, you shouldn't surf it ...

Cheers

**GAFF371** · 07-21-2012, 09:43 AM

Ok I think I may be explaining this completely wrong. So let me try to break it down a little more maybe that will help. We use web access to check our email. Basically mail.companyname.com which brings up a login screen similar to the outlook login screen, only on the internet. User name, password, bam your email is there. I took my maxx and went to the email app, setup exchange email using username, password, and server which is same as the address we go to for checking email (mail.companyname.com). Now I understand that whatever email I send regardless of whether it is from outlook, the web access, or my phone is monitored. There is no security agreements, no pins, screen locks, or anything when I set it up via email app on the maxx. My dilemma is in regards to access to my phone OTHER THAN the company mail. I am wondering if running this app that syncs email to me phone would allow IT to remotely enter my phone, view my SMS or MMS, browsing history, favorites, mess with my apps, phone logs, or gmail which I use through the gmail app. I didn't think this would be the case because as far as I can tell the email app is basically just checking my email the same way I do when I go to the website to check it, only it is constantly signed in. I don't believe they can access files on my laptop if I go to the website and check my work email from home, but hey I could be wrong there as well. I hope this clears up what I am asking. I thank everyone for their input because I am learning more about it but I still don't think my question has been answered totally.

**PeteK01** · 07-21-2012, 10:18 AM

Originally Posted by GAFF371

Ok I think I may be explaining this completely wrong. So let me try to break it down a little more maybe that will help. We use web access to check our email. Basically mail.companyname.com which brings up a login screen similar to the outlook login screen, only on the internet. User name, password, bam your email is there. I took my maxx and went to the email app, setup exchange email using username, password, and server which is same as the address we go to for checking email (mail.companyname.com). Now I understand that whatever email I send regardless of whether it is from outlook, the web access, or my phone is monitored. There is no security agreements, no pins, screen locks, or anything when I set it up via email app on the maxx. My dilemma is in regards to access to my phone OTHER THAN the company mail. I am wondering if running this app that syncs email to me phone would allow IT to remotely enter my phone, view my SMS or MMS, browsing history, favorites, mess with my apps, phone logs, or gmail which I use through the gmail app. I didn't think this would be the case because as far as I can tell the email app is basically just checking my email the same way I do when I go to the website to check it, only it is constantly signed in. I don't believe they can access files on my laptop if I go to the website and check my work email from home, but hey I could be wrong there as well. I hope this clears up what I am asking. I thank everyone for their input because I am learning more about it but I still don't think my question has been answered totally.

the answer is no. there is no remote access to your phone to see anything.

**Praggles** · 07-21-2012, 05:30 PM

Originally Posted by bzxzlg

Having done this for years, something else to consider - you're using your personal phone for your professional needs and are therefore now allowing the company to remotely lock and/or WIPE your phone. This is kind of a bonus depending on how you look at it since the average user doesn't lock their phone - you're now subject to your comany's administrator's policies - ie locking your phone and auto-wipe if password mis-typed x number of times. Further, just be smart about it - right? If you wouldn't say it out loud and write it down on paper, you shouldn't surf it ...

Cheers

I have to write the word PORN all day long.....I just like writing it

Sent from my DROID RAZR using Android Central Forums

**GAFF371** · 07-21-2012, 07:56 PM

Hahah I wish I had time to look at porn all day long haha... That would be at least a valid reason for wondering this lol. My reason is I don't really understand all this technology and it makes me nervous what could happen if my info fell into the wrong hands

**deparson** · 07-21-2012, 08:45 PM

Yes, the ActiveSync agent will allow for a security profile to be pushed to the phone once you 'connect' to your work server. That profile, if so designed, will allow the phone to transmit almost all of its user data including contacts, emails, stored files like photos, etc, and browsing history.

**PeteK01** · 07-22-2012, 08:44 AM

Originally Posted by deparson

Yes, the ActiveSync agent will allow for a security profile to be pushed to the phone once you 'connect' to your work server. That profile, if so designed, will allow the phone to transmit almost all of its user data including contacts, emails, stored files like photos, etc, and browsing history.

There is noting..I repeat...nothing in the policies that are built in to Exchange 2010 that that will allow the retrieval of any data (other then to sync your email,contacts, calendar..)from your phone. Maybe some 3rd party management application may have this, but the policy that can be pushed to your phone from Exchange 2010 is to protect company information and enforce company security policies (password on your phone..remote wipe..encryption, timeout vlaues etc..). Browser history, pictures, text messages etc...remain private.