Personal phones
Business email on personal phones, without giving up control.
Most staff want work email on their own phone. We set it up so business data stays in the business apps, access can be cut off when someone leaves, and a lost phone does not take client data with it.
The problem, and what we do about it
Once business email lands in a phone's built-in mail app, the business has very little control over it. When that person leaves, or the phone is lost, the email and attachments go with it.
Microsoft 365 can protect business data inside apps like Outlook, Teams, and OneDrive without taking over the whole phone. It can require a PIN to open them, block copying business data into personal apps, and later remove the business data from those apps while leaving photos and personal apps alone. That needs a Microsoft plan that includes Intune, such as Business Premium, and it only covers apps built to support it. We check both before you buy anything.
Who it's for
Honest on purpose, so nobody wastes a call.
A good fit
- Businesses where staff use their own phones for email, Teams, or files
- Trades companies with field crews on personal phones
- Firms answering a customer or insurer question about personal devices
Not a fit
- Full control of personal phones. We don't wipe or track personal devices
- Apps that don't support Microsoft app protection, which can't be cleared selectively
What you get
Written down so there are no surprises on the quote.
What's included
- A review of which phones and apps staff use for business today
- App protection rules for supported Microsoft apps, such as requiring a PIN and blocking copy and paste into personal apps
- Access rules so business email only opens in protected apps
- A written lost-phone procedure and departure procedure
- Removal of business data from supported apps when someone leaves or loses a phone
- A one page guide for staff on what the business can and can't see
What it's not
- Wiping a personal phone. Removal applies to business data in supported apps only
- Every app on every phone. Removal only works in apps that support it
- Phone hardware, carrier plans, or repairs
- Microsoft licenses, which are paid to Microsoft
What it costs
New services are quoted after a short review, so the price fits your setup instead of a guess. You get a fixed price in writing before any work starts.
| What | Price |
|---|---|
| Personal phone setup and written procedures | Quoted after a short review |
| A Microsoft plan that includes Intune, such as Business Premium | Paid to Microsoft at their price |
| Adding and removing people after setup | Included in the monthly care plan for covered people |
See the price for this on the pricing page
Business Premium includes Intune. Many offices are on Business Basic or Business Standard, so we check your plan first and tell you any added license cost before setup.
What it depends on
- A Microsoft 365 plan that includes Intune, such as Business Premium, or a separate Intune license
- Phones on versions of iOS or Android that Microsoft still supports
- Staff signing in through the protected Microsoft apps
Next step
Book a 15-minute call and tell us which Microsoft 365 plan you have and how many people use personal phones.
How it works
Simple on purpose. You always know what's next and what it costs.
A 15-minute call
Tell us what's going on. We'll tell you honestly if we're a fit.
A quick look
A short visit or a remote session so we see your setup for real.
A fixed price in writing
What we'll do, what it costs, and when. The price doesn't move.
Scheduled work
We book a time that doesn't shut your business down, then get it done. Reply times and support hours are on the service levels page.
Questions owners ask
Can the business see staff photos or texts?
No. App protection applies to business data inside the protected apps. The business can't see personal apps, photos, or messages through it.
What happens when someone quits?
We remove their access and send a removal of business data to the supported Microsoft apps on their phone, which takes effect the next time an app is opened. Their personal data stays. Email already copied into an unsupported app is out of reach, which is why the access rules go in first.
Do we need to upgrade Microsoft 365?
Maybe. App protection needs Intune. Business Premium includes it. On Business Basic or Business Standard we check Microsoft's current plan details and tell you whether a separate Intune license is needed.
What about company-owned phones?
Those can be fully managed and fully wiped. Tell us on the call and we quote them together.
What does it cost?
It depends on how many people and which apps, so we quote it after a short review.
Sources we used
- Microsoft Learn, Microsoft 365 Business Premium security FAQ
- Microsoft Learn, Intune app protection policies
- Microsoft Learn, wipe only business data from Intune protected apps
Public guidance we relied on for the facts on this page. None of it endorses Vektrion.
Ask a quick question, get a straight answer
Three fields. You hear back the same business day by text or email, whichever you give us.
Stop being your own IT person.
Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.