**What we can see**: enrollment status, iOS version, installed apps, device health (compliance checks, jailbreak indicators).
**What we cannot see**: iMessages, calls, photos, email content, browsing history (there's no browser anyway), GPS location (unless you report the device lost).
**What we store**: your configuration (whitelist, policies), your enrollment token (cryptographic identifier linking your device to our MDM account), your contact information for support.
**What we don't store**: your Apple ID password (we never see it), your content, your calls, your messages.
**Who has access to your configuration**: our operations team (small, Lakewood-based, all NDAs signed). No external data brokers, no analytics vendors, no advertisers.
**Right to delete**: on request, we wipe your account from our management console within 24 hours. Your device continues to function, just without our management.