Can the work profile have access to my browsing history, device files, etc.?

Search This thread

Fred964

New member
Apr 17, 2021
2
0
I was recently admitted to a company, and as an ease of accessing my e-mails and work schedule, the android "work profile" was made available so that I could have access to company information (such as e-mails, calendar, information and others) without having to receive a corporate cell phone.

However, my biggest concern is with the organization's access to my data. My organization that created the work profile, can have access to my browsing history, data on the device (such as photos, application files, etc.), time I spend using my cell phone, contacts, call logs, and other data personal profile?

I have already visited the google instructions page, but I was still unsure because my organization installed some network certificates and the warning "Your organization can monitor network traffic ..."

Another question:
If I leave a work profile app open in the background, and use my personal profile at the same time, can my organization have access to network traffic and consequently my personal information?

All questions, however redundant, are intended to clarify the details of the organization's access to my personal information

From now on, I am immensely grateful for the help and time you spent reading my questions.
 

jwoegerbauer

Senior Member
  • Jul 11, 2009
    5,156
    8
    1,260
    European Union
    You are holding a phone in your hands for which an organization has concluded a data plan contract and is paying for it. They therefore will have a legitimate interest in the network traffic on this device, unless it is a contract for unlimted bandwidth. Network traffic is triggered by apps / services , which can actually be read out: they simply have to install a HTTP/S proxy what is intercepting the HTTP/S traffic on any app housed on the phone.
     
    Last edited:

    Fred964

    New member
    Apr 17, 2021
    2
    0
    You are holding a phone in your hands for which an organization has concluded a data plan contract and is paying for it. They therefore will have a legitimate interest in the network traffic on this device, unless it is a contract for unlimted bandwidth. Network traffic is triggered by apps / services , which can actually be read out: they simply have to install a HTTP/S proxy what is intercepting the HTTP/S traffic on any app housed on the phone.
    The phone is mine, and there is no plan
    of internet hired by the company.
    It's my personal cell phone, and for me to get
    view emails and talk to people from
    within the organization, I had to enable
    the "work profile".
    So I had my personal and work profile
    on my personal device.
    My question is: my company can see
    my personal files and my online activity
    in the "PERSONAL PROFILE"?
     

    User699

    Senior Member
    Feb 28, 2021
    223
    1
    41
    The phone is mine, and there is no plan
    of internet hired by the company.
    It's my personal cell phone, and for me to get
    view emails and talk to people from
    within the organization, I had to enable
    the "work profile".
    So I had my personal and work profile
    on my personal device.
    My question is: my company can see
    my personal files and my online activity
    in the "PERSONAL PROFILE"?
    I created a second user on my phone named "Company".
    If I do this it asks me if I wan't to turn on phone calls and SMS and then warns that
    Call and SMS history will be shared with this user.
    That makes sense, since I (as the owner) can decide whether or not other users of my phone can access that data.

    I tried to access owners files via filemanager from "Company" account. I couldn't see anything.
    I tried the same but via adb using a root shell -> I had full access to owners files.

    Owner has a VPN active. I tried to access that VPN from within "Company". Didn't work.

    Tried to access apps from within "Company" -> no luck.

    Checked settings -> some are gone, some aren't. E.g. I can see my paired devices (paired from owner) when I'm in "Company" account.

    Soo, to answer your question:
    My organization that created the work profile, can have access to my browsing history, data on the device (such as photos, application files, etc.), time I spend using my cell phone, contacts, call logs, and other data personal profile?

    I have already visited the google instructions page, but I was still unsure because my organization installed some network certificates and the warning "Your organization can monitor network traffic ..."
    Access to browsing history, data, contacts? No.
    Time spend? I don't know but in battery usage settings I can see how much battery has been used by the owner account.
    Call logs? Yes, If you accepted that.
    Your language? Yes.

    About certificates: I don't know excactly what they do (I figured if you turn them off your device cannot connect to the internet anymore if that certificate is needed for that connection attempt) but you can go to Security -> Encryption & credentials -> Trusted credentials and turn them off while your in your personal account.


    However: One questions remains: Does the profile your company created somehow differ from the one you can create manually via settings? I don't think so, so above things should be valid.

    If that's an option you could also ask your company directly (even though I can understand if you might not want to trust them).
     
    • Like
    Reactions: Fred964

    Top Liked Posts

    • There are no posts matching your filters.
    • 1
      The phone is mine, and there is no plan
      of internet hired by the company.
      It's my personal cell phone, and for me to get
      view emails and talk to people from
      within the organization, I had to enable
      the "work profile".
      So I had my personal and work profile
      on my personal device.
      My question is: my company can see
      my personal files and my online activity
      in the "PERSONAL PROFILE"?
      I created a second user on my phone named "Company".
      If I do this it asks me if I wan't to turn on phone calls and SMS and then warns that
      Call and SMS history will be shared with this user.
      That makes sense, since I (as the owner) can decide whether or not other users of my phone can access that data.

      I tried to access owners files via filemanager from "Company" account. I couldn't see anything.
      I tried the same but via adb using a root shell -> I had full access to owners files.

      Owner has a VPN active. I tried to access that VPN from within "Company". Didn't work.

      Tried to access apps from within "Company" -> no luck.

      Checked settings -> some are gone, some aren't. E.g. I can see my paired devices (paired from owner) when I'm in "Company" account.

      Soo, to answer your question:
      My organization that created the work profile, can have access to my browsing history, data on the device (such as photos, application files, etc.), time I spend using my cell phone, contacts, call logs, and other data personal profile?

      I have already visited the google instructions page, but I was still unsure because my organization installed some network certificates and the warning "Your organization can monitor network traffic ..."
      Access to browsing history, data, contacts? No.
      Time spend? I don't know but in battery usage settings I can see how much battery has been used by the owner account.
      Call logs? Yes, If you accepted that.
      Your language? Yes.

      About certificates: I don't know excactly what they do (I figured if you turn them off your device cannot connect to the internet anymore if that certificate is needed for that connection attempt) but you can go to Security -> Encryption & credentials -> Trusted credentials and turn them off while your in your personal account.


      However: One questions remains: Does the profile your company created somehow differ from the one you can create manually via settings? I don't think so, so above things should be valid.

      If that's an option you could also ask your company directly (even though I can understand if you might not want to trust them).
    Our Apps
    Get our official app!
    The best way to access XDA on your phone
    Nav Gestures
    Add swipe gestures to any Android
    One Handed Mode
    Eases uses one hand with your phone