Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If your employer enrolled "your" phone in MDN/Device Management, then they can do whatever (inc. remote wipes). But more than likely it is their phone if they did that. Simply logging into GSuite doesn't allow that.

Individual apps can wipe their own data, but apps don't have the arbitrary ability to wipe the entire phone. Even Google's apps.

To quote the docs:

> [0] Before you can wipe a user’s mobile device, you need to turn on mobile management. For details, see Set up mobile device management[1].

PS - I'm responding because this myth that simply retrieving GSuie/Office 365 email allows device wipes just won't die. That isn't how any of this works. Enterprise device management requires special device enrollment, simply signing into a random email app isn't it.

[0] https://support.google.com/a/answer/7542661?hl=en

[1] https://support.google.com/a/answer/7396025?visit_id=6372178...



On Android, in the old days, an app could be registered as a "Device Administrator". When you set up an Exchange account on the device, the email client requested the user to activate device admin before it would sync email. If the user clicked the activate button, the email client would have permission to reset password/wipe device, etc. [0] This didn't require enrolling into any MDM software.

[0] https://developer.android.com/guide/topics/admin/device-admi...


My employer requires MDM before allowing email client access. They don't require it for webmail access.


My employer is the same, which is awesome because it means when I turn off my laptop that is the end of the day for me :)


It's quite common in my experience to require enrollment to be able to get access. And it's not always the company's device, employees can choose to enroll their own devices if they want mobile access.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: