How to keep sensitive conversations off a work phone
What a company-managed phone can see, what it keeps, and what you can do about it.
Short answer
The most reliable way is not to have those conversations on the work phone at all: use a personal device. If the work phone is the only one you have with you, don't install a messaging app for them. Use a private browser window and close it when you're done. Then there is no app in the phone's app list, nothing on the lock screen, and no message history on the phone or in its backups.
Island.chat works this way: no app to install, no push notifications, no phone number required to register.
Start a private conversationWhat a company-managed phone can see
Most work phones are enrolled in a mobile device management (MDM) system. What your employer can see depends on how the phone is enrolled and on company policy, but on a company-owned phone it commonly includes:
- Installed apps. The list of apps on the phone is usually reported to IT. A new messaging app shows up in that list.
- Notifications. Message previews appear on the lock screen, where anyone holding the phone can read them, including IT when you hand the phone in for repair.
- Backups. Many messaging apps keep their history on the phone and include it in phone or cloud backups. On a work phone, those backups may go to an account the company manages.
- Network traffic. Company Wi-Fi and VPN logs can show which services the phone connects to. On a fully managed phone, the company may also be able to inspect web traffic.
- The phone itself, later. Work phones are handed back when you leave, reissued to someone else, and in a legal dispute sometimes collected and searched.
On a personally owned phone with a separate work profile, the employer usually sees only the work side. On a phone your employer fully controls, assume that anything on it could be seen.
A messaging app versus a browser tab
| On the work phone | Typical messaging app | Island.chat in a private window |
|---|---|---|
| App in the phone's app list | Yes | No app to install |
| Message previews on the lock screen | Yes, unless turned off | No push notifications from Island.chat |
| Message history stored on the phone | Yes | No. Decrypted messages exist only in the page's memory while it is open |
| History in phone backups | Often | No. Messages are stored encrypted on our server, not on the phone |
| Phone number tied to the account | Usually | No phone number required to register |
| Service visible in network logs | Yes | Yes. The address island.chat can still appear |
If you have to use the work phone
- Open a private (incognito) window and close it when you're done. The browser then keeps no history or login from that visit.
- Don't let the browser save your password. On a work phone, its password manager may sync to a work account.
- Don't add the site to the home screen. That puts an icon back on the phone.
- Prefer mobile data to office Wi-Fi. If the phone has an always-on company VPN, the traffic passes through the company network either way.
- Remember the other side. What you send is on their screen too, and they can take screenshots.
Check your obligations first
Some conversations are not yours to move. Employer policies, and record-keeping rules in regulated work such as financial services, can require business communications to stay on approved, archived channels. Regulators have fined firms heavily for staff using personal messaging apps for business. Island.chat is for conversations that are yours to keep private, not for taking work records off the systems that must keep them.
What this does not protect against
- Monitoring software on the phone. If the company can install software that records the screen or keystrokes, no app or website is private on that device.
- Someone looking at the screen while the conversation is open.
- The other person taking screenshots or forwarding what you wrote.
- The page itself. Island.chat runs in your browser, so you rely on the code our server sends each time. A network that can inspect and change your web traffic could in principle tamper with it. Our Security page explains this limit.
About Island.chat
Island.chat is private, invite-only one-to-one messaging in your browser. There is no app to install and no phone number required to register, and messages are end-to-end encrypted on your device before they are uploaded. $20 for 30 days after a free trial. One person pays, both message.