How to keep sensitive conversations off a work phone

What a company-managed phone can see, what it keeps, and what you can do about it.

Short answer

The most reliable way is not to have those conversations on the work phone at all: use a personal device. If the work phone is the only one you have with you, don't install a messaging app for them. Use a private browser window and close it when you're done. Then there is no app in the phone's app list, nothing on the lock screen, and no message history on the phone or in its backups.

Island.chat works this way: no app to install, no push notifications, no phone number required to register.

Start a private conversation

What a company-managed phone can see

Most work phones are enrolled in a mobile device management (MDM) system. What your employer can see depends on how the phone is enrolled and on company policy, but on a company-owned phone it commonly includes:

  • Installed apps. The list of apps on the phone is usually reported to IT. A new messaging app shows up in that list.
  • Notifications. Message previews appear on the lock screen, where anyone holding the phone can read them, including IT when you hand the phone in for repair.
  • Backups. Many messaging apps keep their history on the phone and include it in phone or cloud backups. On a work phone, those backups may go to an account the company manages.
  • Network traffic. Company Wi-Fi and VPN logs can show which services the phone connects to. On a fully managed phone, the company may also be able to inspect web traffic.
  • The phone itself, later. Work phones are handed back when you leave, reissued to someone else, and in a legal dispute sometimes collected and searched.

On a personally owned phone with a separate work profile, the employer usually sees only the work side. On a phone your employer fully controls, assume that anything on it could be seen.

A messaging app versus a browser tab

On the work phoneTypical messaging appIsland.chat in a private window
App in the phone's app listYesNo app to install
Message previews on the lock screenYes, unless turned offNo push notifications from Island.chat
Message history stored on the phoneYesNo. Decrypted messages exist only in the page's memory while it is open
History in phone backupsOftenNo. Messages are stored encrypted on our server, not on the phone
Phone number tied to the accountUsuallyNo phone number required to register
Service visible in network logsYesYes. The address island.chat can still appear

If you have to use the work phone

  1. Open a private (incognito) window and close it when you're done. The browser then keeps no history or login from that visit.
  2. Don't let the browser save your password. On a work phone, its password manager may sync to a work account.
  3. Don't add the site to the home screen. That puts an icon back on the phone.
  4. Prefer mobile data to office Wi-Fi. If the phone has an always-on company VPN, the traffic passes through the company network either way.
  5. Remember the other side. What you send is on their screen too, and they can take screenshots.

Check your obligations first

Some conversations are not yours to move. Employer policies, and record-keeping rules in regulated work such as financial services, can require business communications to stay on approved, archived channels. Regulators have fined firms heavily for staff using personal messaging apps for business. Island.chat is for conversations that are yours to keep private, not for taking work records off the systems that must keep them.

What this does not protect against

  • Monitoring software on the phone. If the company can install software that records the screen or keystrokes, no app or website is private on that device.
  • Someone looking at the screen while the conversation is open.
  • The other person taking screenshots or forwarding what you wrote.
  • The page itself. Island.chat runs in your browser, so you rely on the code our server sends each time. A network that can inspect and change your web traffic could in principle tamper with it. Our Security page explains this limit.

About Island.chat

Island.chat is private, invite-only one-to-one messaging in your browser. There is no app to install and no phone number required to register, and messages are end-to-end encrypted on your device before they are uploaded. $20 for 30 days after a free trial. One person pays, both message.