Employer Access

[GAFF371]

Hey everyone, new to the forum as well is my new Razr Maxx. I have been googling all day and can't find an answer to this question so I signed up to post here. While setting up my phone I decided to access my work email through exchange email on the default android e-mail app. (Info was the same as what I use to log in via OWA). In the past I have always used a rule to auto forward work email to my gmail account. I am wondering if using the exchange email gives my employer access to my phones contact list, text messages, personal email, and web history/bookmarks. Again this is my personal phone, I pay the bill, no reimbursement for it or anything like that. All I did was simply configure an e-mail address using exchange and it syncs with my phone. Thanks for any help you guys can give me!

 

[1414H77]

Yes, your employer would have access. Using the phone on exchange it is just syncing using ActiveSync with the exchange server. What you have on both places is the same- the same emails, contacts, calendar, tasks, etc. Also, autoforwarding as you did in the past also does not protect your email from your employer. It still comes and goes through the corporate exchange server and the emails that were forwarded are there.

One more word of warning. Even if you delete your emails on the exchange server and can't see them does not mean they are not still there. Most companies auto archive all emails due to internal policy, plus many employers have to do so for various federal laws.

 

[GAFF371]

Thanks for the info. I figured that they would be able to see anything I send on my work email. What I am wondering is what about my gmail, my web browsing, my text messages. For instance if I am getting email from their server, are they able to basically get into my phone and read a conversation between me and my wife or pull up history from my browser if I have checked my bank account info, etc.? Don't really have much to hide however I don't feel it is any of their business either. Needless to say the convenience of having email pushed to my phone directly is not worth giving up my personal privacy. Maybe I am just over thinking this. I have checked email from browser via OWA in the past so I guess that is basically the same thing as that correct?

 

[JSQ]

This would depend on how your work exchange server is set up. With ours it only sync's email, calender, and tasks. It does not sync contacts. Our IT department set it up this way to keep our personal contacts separate. On the other hand if you go to compose an email and start typing in the "to" field it will bring up the global contacts list, however your work contacts will not show up in your phones contacts list. Check with your IT department to verify how they have it setup.

 

[GAFF371]

Ok. Not to beat this to death but sounds like you guys are saying they can see anything as far as email goes. I am more worried about say they can see my browser history and I just checked my mobile banking and now they know how much money I have, what I spend with my credit card, etc. Or be able to view private conversations in my SMS. I guess I am kind of answering my own stuff here, the fact that I am even worried about it makes me 1) a paranoid person and 2) I should probably just delete the exchange access and check it from the browser via OWA

 

[Schufly]

Generally, any time you agree to accept the terms of use involved with a corporate email system, you hand over any expectation of privacy on the device you access that account from. Can they access your personal contacts and texts? Hell yes. Many wouldn't. Most employers don't have the time or reason to do so. I think it's best to keep the work and private life separate. Don't give them the opportunity to use your personal interweb travels against you.

 

[1414H77]

Ok. Not to beat this to death but sounds like you guys are saying they can see anything as far as email goes. I am more worried about say they can see my browser history and I just checked my mobile banking and now they know how much money I have, what I spend with my credit card, etc. Or be able to view private conversations in my SMS. I guess I am kind of answering my own stuff here, the fact that I am even worried about it makes me 1) a paranoid person and 2) I should probably just delete the exchange access and check it from the browser via OWA

You miss the point. Exchange is on a server. OWA is still checking email on the Exchange server. OWA does NOT give you any protection.

 

[Praggles]

Once you active sync they can see all your emails on that account. Depending on your companies size no one will check them until they have to though. You'll probably be gone before they realize you are job searching but they will find out if you e mailed a secret to a competitor...just use common sense.

Can your company see your browsing history or texts from your phone? Someone would have to explain to me how that could work...I really doubt most would be able to (unless they employ extraordinary resources I.e. you work for Google or NSA) or could. I think that info travels a separate stream and is only available to God, Carrier, Google and the FBI/DARPA, Beijing and Kremlin.

Sent from my DROID RAZR using Android Central Forums

 

[kingmeow]

Does your work have webmail? If so, check your work e-mail that way. That's what I do with Dolphin. I want to keep things separate.

 

[bzxzlg]

Having done this for years, something else to consider - you're using your personal phone for your professional needs and are therefore now allowing the company to remotely lock and/or WIPE your phone. This is kind of a bonus depending on how you look at it since the average user doesn't lock their phone - you're now subject to your comany's administrator's policies - ie locking your phone and auto-wipe if password mis-typed x number of times. Further, just be smart about it - right? If you wouldn't say it out loud and write it down on paper, you shouldn't surf it ...
Cheers

 

[GAFF371]

Ok I think I may be explaining this completely wrong. So let me try to break it down a little more maybe that will help. We use web access to check our email. Basically mail.companyname.com which brings up a login screen similar to the outlook login screen, only on the internet. User name, password, bam your email is there. I took my maxx and went to the email app, setup exchange email using username, password, and server which is same as the address we go to for checking email (mail.companyname.com). Now I understand that whatever email I send regardless of whether it is from outlook, the web access, or my phone is monitored. There is no security agreements, no pins, screen locks, or anything when I set it up via email app on the maxx. My dilemma is in regards to access to my phone OTHER THAN the company mail. I am wondering if running this app that syncs email to me phone would allow IT to remotely enter my phone, view my SMS or MMS, browsing history, favorites, mess with my apps, phone logs, or gmail which I use through the gmail app. I didn't think this would be the case because as far as I can tell the email app is basically just checking my email the same way I do when I go to the website to check it, only it is constantly signed in. I don't believe they can access files on my laptop if I go to the website and check my work email from home, but hey I could be wrong there as well. I hope this clears up what I am asking. I thank everyone for their input because I am learning more about it but I still don't think my question has been answered totally.

 

[PeteK01]

Ok I think I may be explaining this completely wrong. So let me try to break it down a little more maybe that will help. We use web access to check our email. Basically mail.companyname.com which brings up a login screen similar to the outlook login screen, only on the internet. User name, password, bam your email is there. I took my maxx and went to the email app, setup exchange email using username, password, and server which is same as the address we go to for checking email (mail.companyname.com). Now I understand that whatever email I send regardless of whether it is from outlook, the web access, or my phone is monitored. There is no security agreements, no pins, screen locks, or anything when I set it up via email app on the maxx. My dilemma is in regards to access to my phone OTHER THAN the company mail. I am wondering if running this app that syncs email to me phone would allow IT to remotely enter my phone, view my SMS or MMS, browsing history, favorites, mess with my apps, phone logs, or gmail which I use through the gmail app. I didn't think this would be the case because as far as I can tell the email app is basically just checking my email the same way I do when I go to the website to check it, only it is constantly signed in. I don't believe they can access files on my laptop if I go to the website and check my work email from home, but hey I could be wrong there as well. I hope this clears up what I am asking. I thank everyone for their input because I am learning more about it but I still don't think my question has been answered totally.

the answer is no. there is no remote access to your phone to see anything.

 

[Praggles]

Having done this for years, something else to consider - you're using your personal phone for your professional needs and are therefore now allowing the company to remotely lock and/or WIPE your phone. This is kind of a bonus depending on how you look at it since the average user doesn't lock their phone - you're now subject to your comany's administrator's policies - ie locking your phone and auto-wipe if password mis-typed x number of times. Further, just be smart about it - right? If you wouldn't say it out loud and write it down on paper, you shouldn't surf it ...
Cheers

I have to write the word PORN all day long.....I just like writing it

Sent from my DROID RAZR using Android Central Forums

 

[GAFF371]

Hahah I wish I had time to look at porn all day long haha... That would be at least a valid reason for wondering this lol. My reason is I don't really understand all this technology and it makes me nervous what could happen if my info fell into the wrong hands

 

[deparson]

Yes, the ActiveSync agent will allow for a security profile to be pushed to the phone once you 'connect' to your work server. That profile, if so designed, will allow the phone to transmit almost all of its user data including contacts, emails, stored files like photos, etc, and browsing history.

 

[PeteK01]

Yes, the ActiveSync agent will allow for a security profile to be pushed to the phone once you 'connect' to your work server. That profile, if so designed, will allow the phone to transmit almost all of its user data including contacts, emails, stored files like photos, etc, and browsing history.

There is noting..I repeat...nothing in the policies that are built in to Exchange 2010 that that will allow the retrieval of any data (other then to sync your email,contacts, calendar..)from your phone. Maybe some 3rd party management application may have this, but the policy that can be pushed to your phone from Exchange 2010 is to protect company information and enforce company security policies (password on your phone..remote wipe..encryption, timeout vlaues etc..). Browser history, pictures, text messages etc...remain private.

 

[gobi the bear]

I was suffering the web and I found this thread. I could not help myself but to chime in. PeteK01 is correct. Exchange Security for at least 2010 is not able to monitor your web history or text messages. The only way a company can monitor your personal information is though a third party software. The third party software are commonly known as MDM (Mobile Device Management). Not only can they monitor your personal e-mail, pictures, and text messages. They can turn your GPS on to obtain your location. Basically they have access to your phones hardware remotely. You have to agree and sign off on them having access. Remember to always read the fine print. Yes big brother is watching you… thank you Edward Snowden!
Good News! There are Apps in the Google Play Store that can tell you if something is monitoring you. I like to use “Malwarebytes Anti-Malware” it’s free and simple to use. Not only does it scan any Apps you downloads and install. It will scan your phone and tell you which apps have control or access to what content.
There are ways to get around this and solutions. Like getting a personal phone and keeping work stuff on work devices. I know it’s a pain and extra money but how much is your privacy worth. If you tech savvy there are ways to get around this…google it.
Sorry about my grammar “me english no good”
Wish you all luck out there.

 

[geved]

Hi - Are you saying that if I use my desktop computer to log into a company outlook account through OWA that uses exchange, my employer has access my computer browsing history in other tab or windows during that session, or my browser bookmarks, or worse?

 

[acorgihouse]

Hi all, not sure how to word this. I got a new pc and am setting it up at home (I still use a pc for desktop stuff and running some peripherals.) I work in an environment where I need to have access to worksite through VPN, and I do a lot of work from home via that. I also have been encouraged to push my work email to my phone, and although I'm careful, I of course sometimes check personal email and do a bit of browsing from the computer at my desk. Usually work related, and nothing awful, and they block all the usual stuff like FB and blogs and whatnot anyway. So, tonight I'm setting up my new home pc, and I open my google account. In going through the initial setup, I see the security thing, and then the computers that have accessed my google account recently. There is this computer, my laptop I use all day long (personal) and my phone. Then there are two listed in Alabama, the town where my corporate HQ is, I live and work in Florida. Does this mean my employer is accessing my google account (and therefore ?browsing and email and etc.) or could my using my chrome browser to access work email from home show up like this? I know, convoluted explanation, but hope it is clear enough. I'm paranoid enough, I have no question my employer reads our email, but if they are going into personal accounts I have a major issue. Thanks.

 

[1 kimcola]

Hi, I had a question abut my phone being hacked because my boss had repeated things back to me on 3 seperate occasions that were only said or texted on my phone from my home. I went to Verizon, my service provider last night and asked about phone hacks. They asked why and I explained. There question was do you access your work email from your phone I said yes but through the internet not the phone app. They asked do I access my work google account from my phone I said yes my calendars are synced. They said my employer now has full access to everything on my phone, I said even voice conversations, and she said it is possible depending on your employer. Her words were it is a contract we have with them. I was sounding paranoid when I kept saying my boss must have hacked my phone and everyone thought I was nuts, well according to verizon I'm not nuts. Now the next question is the available time the employer has to search your phone. I work for a school district so I would hope they have more things to do but I'm not sure now.