Every iPhone Apple ships can be in one of two modes: **unsupervised** (the default) or **supervised**. The differences between them are the foundation of every enterprise iPhone deployment — and every real kosher iPhone solution.
What unsupervised means
An unsupervised iPhone is a regular consumer iPhone. You own it. You control it. Apps install themselves when you tap them in the App Store. Safari is there. Profile installation requires one tap of confirmation. Screen Time can be turned off with a password you set.
Unsupervised is what Apple wants for 99% of its customers. It's flexible, forgiving, and under the user's thumb.
It is also the reason most "kosher phone" setups are fragile. A regular user on a regular (unsupervised) iPhone has the power to remove every restriction placed on them.
What supervised means
A supervised iPhone is the same hardware, running the same iOS, but in a different mode. Apple designed supervised mode for schools, businesses, and government agencies — any entity that needs to centrally manage iPhones it owns.
Supervision unlocks **restrictions that the user cannot turn off**:
- Force-disable Safari - Force-disable App Store - Force-disable AirDrop and file sharing - Block new VPN profile installation - Block new configuration profile installation - Block app removal - Lock Wi-Fi to specific networks - Require proxy for all traffic - Prevent Find My iPhone from being turned off - Prevent factory reset without MDM authorization
The critical property: **every one of these restrictions is enforced at the OS level, not the app level, and the user has no setting to turn them off**. There is no password to know. There is no setting menu to navigate. The policy lives in the MDM system, which the user does not control.
How an iPhone becomes supervised
Two paths exist:
**Path 1 — Apple DEP (Device Enrollment Program)**: Apple sells the iPhone to an authorized reseller (us), and our DEP account enrolls the device automatically on first boot. The user never sees "accept this management profile" — it's already supervised by the time they turn it on. **This is how The Kosher iPhone ships.**
**Path 2 — Apple Configurator**: An admin physically plugs the iPhone into a Mac running Apple Configurator and supervises it manually. Requires a full factory reset. Used for post-purchase enrollment of existing phones.
In both cases, supervision survives factory resets, iOS updates, and user tampering.
Why this is the right foundation
Every serious enterprise iPhone deployment uses Supervised Mode. Every Apple-certified school program uses it. Every government iPhone fleet uses it. It's been battle-tested by millions of devices over a decade.
When you deploy it for a frum home, you're not rolling your own security. You're using the exact same stack that protects classified government work — tuned for frum family needs. That's the real value.
Frequently Asked Questions
If my phone is supervised, can Apple see what I do?
No. Supervision is a device-policy feature — it does not change what Apple receives. Apple still respects privacy the same way as on an unsupervised iPhone. The MDM operator (us) sees policy-compliance data (is the device checking in? is it on the approved iOS version?) but not content.
Can I turn off supervision later?
Only by working with the MDM operator (us) or by the device being transferred out of the DEP. A user cannot unilaterally remove supervision. If you legitimately want to disenroll, we remove the device from our MDM and the user can then fully reset to a consumer unsupervised iPhone.
Does supervision slow the phone down?
No. Supervision is a policy layer, not an active background process. There is no measurable performance impact.