Employee Quit and Kept the Company Phone? What You Can Do

If the device is company-owned and enrolled in management, you have three practical options: lock it remotely, erase the company data on it, or leave it alone while you negotiate. If it is not enrolled, your options are a polite email, then a formal one, then a decision about whether it is worth pursuing.

That is the honest summary. The gap between those two situations is the entire argument for managing devices before you need to.

First, slow down for ten minutes

The instinct is to wipe the phone that afternoon. Resist it long enough to check three things.

Does the business definitely own this device? Check the purchase record, not your memory. If the employee bought it and was reimbursed, or if it was a personal handset used for work, you are in a different situation with different rules.

How did they leave? A resignation with a worked notice and a forgotten phone in a van is not the same as a dismissal. The first is admin. The second may be a dispute, and anything you do will be looked at later.

What is on it? Customer contacts, email, a payments app, shared drives. This decides how urgent the next step is.

If there is any chance of a dispute, tell whoever handles your HR or legal matters before you act. Wiping a device can destroy evidence that later turns out to matter, and that is a worse problem than the phone.

Option one: lock it

Usually the right first move.

Lock the device remotely and put a message on the screen with your business name and a number to call. The handset becomes unusable for the former employee and obvious to anyone else who picks it up, and no data is destroyed.

This is reversible, proportionate, and it tends to produce a returned phone within a week. People who are ignoring emails respond quite quickly to a device that has stopped working.

While a device is in lost mode NounDesk reports its location and says so on the lock screen. That is a recovery aid, not a way of monitoring where someone goes, and it stops when the device leaves lost mode.

Option two: erase it

The right move when the device holds sensitive data, when the departure was hostile, or when a client contract or regulator requires it.

Erasing removes company data and returns the handset to factory state. Factory reset protection stays in place, so it cannot simply be set up again as a clean phone and sold on. Our lost device page explains what erase does precisely.

Two things to understand before you do it. You lose location reporting, so you lose any realistic chance of recovering the hardware itself. And you cannot selectively wipe only work data on a company-owned device: the whole handset goes. If there are personal photos on a device the business owns, they go too, which is a conversation worth having before rather than after.

Option three: do nothing yet

Legitimate more often than people think.

If the device was locked and encrypted, holds nothing sensitive, and the person left on decent terms, a phone call usually resolves it. Escalating an oversight into an incident costs goodwill you may want later, particularly in a small industry where you will meet these people again.

Set yourself a deadline, though. “We will lock it on Friday if it has not come back” is a plan. “We will sort it out at some point” is how a handset quietly leaves your asset register forever.

If the device was never enrolled

This is the common case and the uncomfortable one.

You can change the passwords on everything that was signed in, which is the most valuable thing you can do and should happen immediately regardless. You can ask for the device back in writing, referring to the employment contract if it covers company property. You can report the IMEI to your carrier. You can, in principle, treat it as a civil matter, though for one handset the cost rarely justifies it.

What you cannot do is lock it, wipe it, or see where it is. The data on it stays on it.

If you are reading this because you are in that position right now, deal with the accounts first. The phone is replaceable; a live session into your customer database is not.

Making it a non-event next time

Offboarding a managed device should take about two minutes.

Have a written list of what every employee has, updated when devices are issued rather than reconstructed later. Assign devices to people in your console so the question “who has this handset” has an answer.

Put device return in the contract and on the exit checklist alongside keys and the building pass. Most phones are kept by accident, not by intent, because nobody asked for them on the last day.

Do the return properly: take the device, wipe it, and enroll it for the next person. A phone that goes back in a drawer still configured for someone who left is a small liability sitting in a drawer. There is a full walkthrough in our post on wiping a company phone before giving it to a new employee.

What to do this week

1. Add devices to your exit checklist. Next to keys, cards and building access. This one line prevents most of these situations.
2. Assign every device to a named person in your console. Unassigned handsets are the ones that disappear.
3. Decide your default response now, while nobody has left. Lock on day three, erase on day fourteen, or whatever suits you. Deciding under pressure produces worse decisions.

FAQ

Can I wipe a phone a former employee is holding?

If the business owns the device and it is enrolled, yes, technically. Whether you should depends on how they left and what else is on it. Check ownership and take advice first if there is any dispute.

What if it is their personal phone with work email on it?

Then you cannot wipe the device, and you should not try. Revoke the account access instead, which removes your data from their mail app without touching anything of theirs.

Can I track the phone to get it back?

NounDesk reports location only while a device is in lost mode, and the lock screen says so. It is designed to recover hardware, not to follow a person. Use it to inform the police rather than to turn up at an address yourself.

Does erasing stop them using the handset?

It returns it to factory state and leaves factory reset protection in place, so it cannot be set up as a clean device without the original credentials.

The difference between a two-minute task and a fortnight of emails is whether the device was enrolled before the person handed in their notice.

See what remote actions cover, or start a free trial.