Intune Managed Device Privacy and Support Statement

County of San Luis Obispo

The County of San Luis Obispo (“the County) can't see your personal information when you enroll a device in Microsoft Intune beyond your name and device name. However, enrolling your device makes certain information, such as device model and serial number, visible to IT administrators and support people with administrator access. This article describes everything the County can and can't access on an enrolled device, and explains why certain data is made visible.

We use the following terms in this article:

• Support person: This is the person or team at the County that you're supposed to contact if you're having problems with your device. They provide technical support for device setup, enrollment, and access.
• IT administrator: IT admin for short, this person or team of people configure the Microsoft Intune device management and enrollment settings for the County. Some IT admins also provide technical support.

Things the County can never see

The County can't see:

• Calling and web browsing history
• Email and text messages
• Contacts
• Calendar
• Passwords
• Pictures, including what's in the photos app or camera roll
• Files
• Device Pin
• Location (of personal devices)
• Camera
• Microphone
• Additionally, on County-owned Android devices with a work profile:
  • Apps and data in your personal profile
  • Phone number

Things the County can always see

The County can always see:

• Device owner
• Device name
• Device serial number
• Device model, such as Google Pixel
• Device manufacturer, such as Microsoft
• Operating system and version, such as iOS 12.0.1
• Device IMEI
• App inventory and app names, such as Microsoft Word
  • On personal devices, the County can only see your managed app inventory, which includes work apps.
  • On County-owned devices, the County can see all apps installed on the device.
  • On County-owned devices with a work profile, which is limited to Android devices, the County can only see the apps installed in your work profile.

Note

The County cannot see all app inventory on Android Enterprise fully managed devices, County-owned work profile devices, and dedicated devices.

Things the County can Sometimes See

• The last four digits of your phone number
• Device storage size

What is a managed app?

An app is considered a managed app when it's installed in one of the following ways:

• You install it from the Company Portal app after the County makes it available to you.
• The County requires you to have a certain app for work and school and automatically installs it on the device upon enrollment.

Things the County might see

The County can see and access certain aspects of your device when assisting with or troubleshooting device setup. This section describes the type of information available.

Phone number

If you're using a County-owned device (excluding County-owned devices with a work profile), the County can see your full phone number. If you're using a personal device, they can see the last four digits of your phone number.

Tip

You can view the ownership type for your device on the Intune Company Portal > Device Details page.

Device storage space

If you have trouble installing a required app, your support person may look at your storage size to find out if low space is the cause.

Location

• County-owned device: The County can view the location of a lost device.
• Personal device: The County can't view the location of a personal device.

The County can put a missing, County-owned iPhone or iPad into managed lost mode, which lets them request the location of the device. When someone requests access to the device location, the device locks and a message appears on the lock screen to explain what's happening. For more information about supervision, which is a type of configuration for County-owned Apple devices, see Get started with a supervised iPhone, iPad, or iPod touch in the Apple support docs.

App inventory details

The County may require you to install a mobile threat defense (MTD) app. If you're required to install an MTD app on your device:

• County-owned device: The County can view details about all apps on the device.
• Personal-owned device: The County can only view the details of your managed apps.

For more information about mobile threat defense, see Install mobile threat defense app.

App permissions

Applies to devices running Android 11 and earlier

An IT admin can grant permission to apps in the work profile, both manually and by automation. The IT admin does this to reduce the number of prompts you receive. The permissions could be for things like the camera, microphone, and location. If your device is running Android 11, you'll receive a push notification when someone grants permission to an app.

Network information

Some information about network connections for Android devices may be available to the County. For example, if the County requires devices to remain within a certain building, your device would identify the network where it's connected.