When it's already happened
Work email on your personal phone: what can they see?
Adding work email to your own phone can mean three very different arrangements, and only one of them puts your whole device within reach of an erase command. Here is how to tell which one you are being asked for.
A work profile wipes work data. Full enrollment can wipe the whole phone. Find out which one you are agreeing to before you tap Enroll.
Last reviewed 2026-08-18 by Grayson Dodson. Free, plain-English guidance for everyday work technology.
Three very different things "add work email" can mean
When someone says put your work email on your phone, they could mean one of three arrangements, and they are not remotely the same. The lightest is an app on its own: you install Microsoft Outlook or the Gmail app, sign in with your work address, and the company protects only what happens inside that app. Microsoft calls this an app protection policy, and the sign of it is being asked to set a PIN for Outlook alone, and finding that copy and paste out of work email is blocked. The middle option is a work profile or container: on Android you get a second, walled-off set of apps living beside your own, and on iPhone Apple calls it User Enrollment, which keeps work data in its own separate space. The heaviest is full device enrollment, where the entire phone is managed. You will usually be pointed at an app to set it up: Intune Company Portal, Google's Device Policy app, Jamf Self Service, or Workspace ONE Intelligent Hub. Which of the three you are being asked for decides everything that follows, so it is a completely fair and normal question to ask out loud before you start.
What they can actually see, and what they cannot
Under every one of these arrangements the company can see the work half: your work email, work calendar, work files, your Teams or Slack messages, and who you sent them to. That is true even if you never touch your phone, because that data lives on their servers already. What enrollment adds is information about the device itself: the make and model, the operating system version, whether you have a screen lock and encryption switched on, whether the phone is jailbroken or rooted, and whether it currently counts as compliant. An admin looking at you in the Intune or Google Admin console mostly sees a row reading iPhone 15, iOS 18.4, compliant, last checked in two hours ago. What is normally not visible is the personal half. Your photo library, your iMessage and WhatsApp threads, your browsing in Safari or Chrome, your banking app, your call log. On an Android work profile the admin can list the apps inside the work profile, not the ones on your personal side. Apple's User Enrollment deliberately hides your personal apps too. A fully enrolled, company-owned phone is the case where an app inventory can cover everything.
The wipe question, answered precisely
Can they erase my phone is the real question under all of this, and the honest answer depends entirely on which arrangement you agreed to. With a work profile or container, the normal power is a selective wipe: the company removes the work profile and everything in it, and your photos, messages, and personal apps are untouched. In Intune that action is called Retire; in the Google Admin console it appears as Wipe account rather than Wipe device. With full device enrollment, a genuine factory reset is on the table, because the phone is enrolled as a managed device and the erase command applies to all of it. That single distinction is the one worth being clear about before you tap anything. One older arrangement deserves a mention. Work accounts added straight into your phone's built-in Mail app using Exchange ActiveSync historically carried a remote wipe command that could erase the whole device. Most employers have moved to an account-only removal or to proper device management since, but if you are being asked to add an Exchange account through Settings, ask which kind of wipe their system can send.
How to check what is on your phone right now
You can see exactly what is installed on your phone today, and it takes under a minute. On an iPhone, open Settings, tap General, and scroll down to VPN and Device Management. If that row is not there at all, no management profile is installed. If it is there, tap it and read the profile: it names the company or the management system and lists what it is allowed to do, including whether it can erase the device. Apple lists User Enrollment differently from full Device Enrollment, and the same screen is where the Remove Management button lives. On Android, look for a separate Work tab in your app drawer, and look closely at the icons, because managed copies of apps carry a small briefcase badge in the corner. Settings, then Passwords and accounts, shows a Work section when a profile exists, and on recent Pixel and Samsung builds the work profile controls sit under Settings, Security and privacy, More security settings. If your whole phone is managed rather than just a profile, Android usually says so plainly with a line about your organization managing this device.
The questions to ask before you tap Enroll
There are five questions worth sending in one short message to whoever set this up, and asking them is completely normal. First, is this a work profile or container, or is it full device enrollment? Second, what exactly can be wiped, only work data or the entire phone? Third, what can the admin see about my device and the apps on it? Fourth, is there a stipend or reimbursement for using my own phone? Plenty of employers pay something monthly and simply never mention it unless somebody asks. Fifth, is a company phone an option instead? Ask by email rather than in a corridor, because a written answer is useful later if anything changes. It also helps to read the two documents that usually answer most of this already: the acceptable use policy and the BYOD or mobile device policy, normally in the employee handbook or on the intranet. If nobody can tell you plainly what can be wiped, that is itself useful information about how well the arrangement is documented, and it is reasonable to say so before agreeing.
Asking for a work device, and knowing the exit
You are allowed to ask for a work phone, and in many roles it is the cleaner answer for both sides. Raise it practically rather than adversarially: say you are happy to be reachable, that you would rather keep work data on a work device, and ask whether a company phone or a stipend is available. If being contactable outside hours is genuinely part of the job, the employer providing the tool is a normal expectation to voice. Whether you can decline outright varies by employer and by country, so check your handbook or ask HR rather than assuming it either way. If you do enroll, know the exit. When you leave, the work profile or management profile is removed, work email and calendar disappear, and on Android the work profile takes its apps with it. Before your last day, move anything genuinely personal out of work apps, because access usually ends the moment your account is disabled. Keeping your own photos and messages outside work apps from the very start keeps the separation clean with no effort at all later.
Common questions
If I add work email to my personal phone, what can they see?
They can see your work email, calendar, and files, plus basic facts about the phone itself: model, operating system version, whether a screen lock and encryption are switched on, and whether it counts as compliant. They normally cannot see your photo library, your personal messages, your browsing, or your banking app. On an Android work profile the admin can list work apps only, and Apple's User Enrollment hides your personal apps as well. Full enrollment on a company-owned phone is the case where a complete app list can be visible.
Can my company wipe my personal phone?
Only if you agreed to full device enrollment. With a work profile or container, the normal action is a selective wipe that removes work data and leaves your photos, messages, and personal apps alone. Intune calls that Retire, and the Google Admin console calls it Wipe account rather than Wipe device. With full enrollment, a factory reset of the whole phone is technically possible. Check Settings, General, VPN and Device Management on an iPhone to see which profile is installed and what it says it is allowed to do.
Can my employer see my text messages and personal apps on my phone?
No, not through a normal work email or work profile setup. Your SMS, iMessage, WhatsApp, and Signal conversations sit outside the managed space, and management tools have no route into them. Personal app content is the same. What can be visible is an app inventory, and even that is limited: an Android work profile shows only work apps, and Apple's User Enrollment hides personal ones. A company-owned, fully enrolled phone is different, so if your employer handed you the device, assume the app list is visible.
Should I put work email on my personal phone or ask for a work phone?
Either is reasonable, and asking is the right first step. Ask whether the setup is a work profile or full enrollment, what can be wiped, whether a stipend exists, and whether a company phone is available. If you are expected to be reachable outside hours, an employer-provided phone is a normal thing to request. Whether you can decline outright depends on your employer and your country, so check the mobile device or acceptable use policy in your handbook, or ask HR directly rather than guessing.
What happens to my phone when I leave the job?
The work profile or management profile is removed, and work email, calendar, and files go with it. On Android the entire work profile and its apps disappear at once. On iPhone the management profile comes off under Settings, General, VPN and Device Management. Your personal data stays exactly where it is under a work profile or container arrangement. Before your last day, move anything genuinely personal out of work apps, because access usually ends the moment your account is disabled, often on the day itself.