Every medical practice I walk into has the same quiet gap: staff check work email on their own phones, and nobody has ever thought of those phones as part of the practice.
It isn't a discipline problem. A nurse answers a scheduling question from the parking lot. The office manager clears the inbox at 9pm. That's how a small practice actually runs.
The risk isn't carelessness. It's that the phone ends up the weakest link in an otherwise locked-down setup — no screen lock, patient names sitting in a messaging app, and when that employee leaves, a copy of your inbox walks out the door with them.
Here's what most owners don't know: you don't have to manage anyone's personal phone to close this. Microsoft Intune can protect the work data inside the app and leave the rest of the phone alone. You can require a PIN just to open Outlook or Teams, encrypt the work data in those apps, block copy and paste from work apps into personal ones, and switch off "Save As" so a document can't be dropped into someone's personal cloud storage.
Staff keep their phone. You keep your data. Nobody has to hand over their photos.
If your team checks work email on personal devices — and they do — this is worth an hour before your next cyber renewal.
Want the next one in your inbox?
One practical Microsoft 365, Copilot, Azure, or security move per week — plain English, no pitch.
Subscribe via email