This policy will outline what Thompson Hospitality can and can't see when you enroll your corporate owned device in Microsoft Intune beyond your name and device name. Enrolling your device makes certain information, such as device model and serial number, visible to IT administrators and support people with administrator access.
We use the following terms in this article:
- Support person: This is the person or team at Thompson Hospitality that you're supposed to contact if you're having problems with your device. They provide technical support for device setup, enrollment, and access.
- IT administrator: IT admin for short, this person or team of people configure the Microsoft Intune device management and enrollment settings for Thompson Hospitality. Some IT admins also provide technical support.
Information Thompson Hospitality can never see
- Calling and web browsing history
- Email and text messages
- Contacts
- Calendar
- Passwords
- Pictures, including what's in the photos app or camera roll
- Files
- Device Pin
- Location (of personal devices)
- Camera
- Microphone
- Additionally, on Thompson Hospitality owned Android devices with a work profile:
- Apps and data in your personal profile
- Phone number
Information Thompson Hospitality can always see
- Device owner
- Device name
- Device serial number
- Device model, such as Dell laptop
- Device manufacturer, such as Dell
- Operating system and version, such as Windows 10/11
- Device IMEI (if it is a mobile device)
- App inventory and app names, such as Microsoft Word
- On Thompson Hospitality owned devices, Thompson Hospitality can see all apps installed on the device.
Note
Thompson Hospitality cannot see all app inventory on Android Enterprise fully managed devices, Thompson Hospitality owned work profile devices, and dedicated devices.
Information Thompson Hospitality can sometimes see
- The last four digits of your phone number
- Device storage size
What is a managed app?
An app is considered a managed app when it's installed in one of the following ways:
- You install it from the Company Portal app after Thompson Hospitality makes it available to you.
- Thompson Hospitality requires you to have a certain app for work and school and automatically installs it on the device upon enrollment.
Information Thompson Hospitality might see
Thompson Hospitality can see and access certain aspects of your device when assisting with or troubleshooting device setup.
Phone number
If you're using a Thompson Hospitality owned device, Thompson Hospitality can see your full phone number. If you're using a personal device, they can see the last four digits of your phone number.
Tip
You can view the ownership type for your device on the Intune Company Portal > Device Details page.
Device storage space
If you have trouble installing a required app, your support person may look at your storage size to find out if low space is the cause.
Location
- Thompson Hospitality owned device: Thompson Hospitality may be able to view the location of a lost device.
- Personal device: Thompson Hospitality can't view the location of a personal device.
Thompson Hospitality owned iPhone or iPad can be placed into managed lost mode, which lets them request the location of the device. When someone requests access to the device location, the device locks and a message appears on the lock screen to explain what's happening.
App permissions
Applies to devices running Android 11 and earlier
An IT admin can grant permission to apps in the work profile, both manually and by automation. The IT admin does this to reduce the number of prompts you receive. The permissions could be for things like the camera, microphone, and location. If your device is running Android 11, you'll receive a push notification when someone grants permission to an app.