How to choose an Android MDM for a small business

Most guides to choosing device management software are written for companies with an IT department, a security team and a procurement process. This one is for the owner, office manager or operations lead who has somewhere between 5 and 50 company-owned Android phones or tablets and needs them locked down, kept updated and recoverable when one goes missing.

It covers the criteria that matter at that size, the red flags to watch for, a scoring checklist you can use on any vendor, how NounDesk answers each point, and when NounDesk is the wrong choice.

If you are still deciding whether you need device management at all, start with Do I need MDM for 10 company phones? and come back.

Start with your fleet, not the feature list

Before you open a single pricing page, write down four facts:

1. How many devices you have now, and how many you expect in 12 months. Pricing that looks fine at 12 phones can change at 26 or 51.
2. Who owns the devices. Company-owned phones and personal phones need different management. Personal phones use a work profile; company phones are fully managed.
3. What the devices are for. General work phones, field technician phones, a front-desk tablet locked to one app, or a mix.
4. Who will run it. If the answer is “me, on a Tuesday afternoon”, the tool has to be understandable without training.

Those four answers remove most options before you compare features.

The criteria that matter

1. Android Enterprise support

Android Enterprise is the management framework Google builds into every certified Android device. A tool built on it can enroll phones as company-owned, push policies, install apps through managed Google Play and erase a device, with no separate agent app to install or keep running.

Ask: is the product built on Android Enterprise, and does it manage devices as fully managed (company-owned)? Ask which Android versions it supports, and whether each setting tells you the version it needs. Older phones silently ignoring a setting is a common source of confusion.

Background: Android Enterprise explained for small businesses.

2. Enrollment options

Enrollment is how a phone joins your management. For a small fleet, two methods matter:

• QR code enrollment. Factory-reset the phone, tap the welcome screen, scan a code. It works on any certified company-owned Android phone and needs nothing from the store you bought it from.
• Zero-touch enrollment. Phones bought through an authorized zero-touch reseller enroll themselves the first time they are switched on. It only works for phones bought that way.

Ask: can I save enrollment settings (group, policy, device naming) so every phone comes out the same? Can I see live status while a phone enrolls? Does the vendor say clearly that zero-touch needs a zero-touch reseller, or does it imply it works on any phone?

3. Policy language you can read

A security policy decides the screen lock, auto-lock time, whether apps from outside Google Play are allowed, USB data transfer, encryption, update timing and more. Many tools present these as raw Android setting names.

Ask: are settings explained in plain English? Are there starting templates? Before a change goes out, does the tool show what will change and how many devices it affects? Is there version history, so you can undo a bad change?

4. App management through managed Google Play

You will want some apps installed on every phone, some optional and some blocked.

Ask: can I search the Play catalog by app name, or do I need package IDs? Can I mark apps required, available or blocked per policy? Can I set a minimum app version and see which phones are behind? Can I publish our own company app privately? Can I turn a website into an app icon for a kiosk?

5. Kiosk mode

If you have a check-in tablet, a till, a delivery scanner or a classroom tablet, you need kiosk mode: one app (or a few) and nothing else.

Ask: is kiosk built in, or a separate product? Can I lock to one app or a short list? Can I control the Home button, brightness, stay-awake and volume? Can I see when a kiosk is unhealthy?

6. Lost devices, and the privacy limits around them

A lost phone needs to be locked, labeled with your contact details and, if it does not come back, erased. Finding it requires location. Tracking employees the rest of the time is a different thing and most staff will object to it.

Ask: is location collected all the time, or only when a device is marked lost? Does the tool read messages, call logs or browsing history? If a stolen phone is factory-reset, will it set up again for the thief, or stay locked to your company’s Google accounts (factory reset protection)?

Further reading: Can my employer see my messages?

7. Roles and audit log

Even a small team should not give everyone the power to erase every phone.

Ask: what roles exist? Can someone do day-to-day work (lock, reboot, lost mode) without being able to erase devices or change policies? Is there a read-only role for an accountant or consultant? Is every admin action recorded with who, what and when?

Guidance on who should have which access: Who should have admin access to company phones?

8. Pricing structure

This is where small businesses get caught. Look at the shape of the pricing, not only the headline number.

• Tiers and feature gates. Is kiosk, lost mode or reporting on a higher plan? If so, the real price is the higher plan.
• Minimums. Is there a minimum device count or minimum monthly charge?
• Contracts. Is the advertised price monthly, or only with an annual commitment paid upfront?
• Device-count steps. Does the per-device price change at 25, 50 or 100 devices?
• Trial terms. How long is the trial, how many devices does it cover, and does it need a card?

A full breakdown with a worked example: How much does MDM cost for a small business?

9. Support

Ask: who answers, by what channel, and during which hours? Is there written documentation you can follow without booking a call? Is there a published service level?

Red flags

Any one of these is worth a direct question before you commit:

• “Contact sales” is the only way to see a price for a fleet of 20 phones.
• The feature you need is on a plan two steps up, and the comparison table is hard to read.
• An annual contract is required to get the advertised monthly price.
• Location tracking is on by default or described as an employee productivity feature.
• Zero-touch is promised for any phone, regardless of where you bought it.
• Setup needs a call with an onboarding specialist before you can enroll one phone.
• No version history for policies, so a mistake cannot be undone in one step.
• Everyone is an admin, with no role that can work without being able to erase.
• No way to try it on real phones before paying.

A scoring checklist for any vendor

Score each vendor 0 (no), 1 (partly, or on a higher plan) or 2 (yes, on the plan you would buy). Use the same questions for every vendor.

Criterion	Question to ask	Score (0 to 2)
Android Enterprise	Built on Android Enterprise, no agent app to install?
Android versions	Supports your oldest phone; each setting shows the version it needs?
QR enrollment	QR code enrollment with saved profiles and live status?
Zero-touch	Zero-touch for reseller-bought phones, stated honestly?
Policies	Plain-English settings, templates, publish preview, version history?
Apps	Add Play apps by name; required, available, blocked; minimum versions?
Private apps	Publish your own app privately to your devices?
Kiosk	Single and multi-app kiosk built in, with kiosk health?
Lost device	Lost mode with on-screen message; location only while lost?
Reset protection	Stolen, factory-reset phone stays locked to your accounts?
Data protection	Can block screenshots, printing, USB file transfer, SD cards?
Website filtering	Block or allow-list websites, with bypasses closed?
Roles	A role that cannot erase or change policies; a read-only role?
Audit log	Every admin action recorded, exportable?
Reports	Compliance, Android versions and patch age, CSV export?
Offboarding	Clear choice of reassign, keep, retire or erase when someone leaves?
Privacy	No message, call or browsing monitoring?
Pricing shape	One price, no tiers, no minimum, no annual contract?
Trial	Free trial on real devices, no card needed?
Support	Named support channel and hours, written docs?

Add up the scores, but read the zeros first. A single zero on something you need (kiosk for a front desk, for example) matters more than the total.

How NounDesk answers each criterion

These are facts about NounDesk today. Where something is not supported, it says so.

• Android Enterprise: NounDesk runs on Android Enterprise, so there is no agent app to install. It manages company-owned Android 8+ phones and tablets. Every policy setting shows the Android version it needs. See supported devices.
• Enrollment: QR code enrollment on factory-reset devices, with saved enrollment profiles (group, policy and naming) and live status from “Waiting for device” to “Ready”. Zero-touch enrollment works for phones bought through an authorized zero-touch reseller; you pick the policy and group once.
• Policies: five security policy templates (Standard Business, Maximum Security, Field Worker, Kiosk, Custom) in plain English. The publish preview lists what changes and how many devices it affects, and full version history allows one-click restore.
• Apps: managed Google Play lets you browse the real Play catalog and add apps by name. App management marks apps Required, Available or Blocked per policy, with minimum versions and an app compliance view. Private apps are published privately, free, in about 10 minutes. Web apps from a URL work for kiosks.
• Kiosk: kiosk mode has a four-step wizard for single-app or multi-app, Home button, brightness and stay-awake, settings access and volume lock, plus per-device kiosk health.
• Lost devices and privacy: lost mode locks the screen with your message and number and reports location with a Google Maps link only while the phone is in lost mode. NounDesk never monitors calls, messages or browsing. Factory reset protection keeps a reset phone locked until one of up to 10 trusted company Google accounts signs in.
• Data protection and filtering: data protection blocks printing, SD cards and USB drives, screenshots and USB file transfer per policy. Website filtering works in Google Chrome, with Incognito turned off and other browsers blocked.
• Roles and audit log: four roles: Owner, Admin, Operator (cannot erase or change policies) and Viewer (read-only). Reports include compliance, Android versions, patch age, CSV exports and a complete audit log.
• Offboarding: when someone leaves, you choose to keep the device unassigned, reassign it, retire it or erase it. Nothing happens automatically.
• Pricing: $1.50 per device per month, one price with every feature included, no tiers, no minimum and no annual contract. The 14-day free trial covers up to 50 devices and needs no card. See pricing.
• Support: email support from 9:00 to 17:00 US Eastern, Monday to Friday, with a published SLA and written docs for every screen.

For a side-by-side with enterprise tools and doing it by hand, see compare. For how data is handled, see security.

When NounDesk is not the right fit

Be clear about this before you start a trial:

• You need iPhone or iPad management. NounDesk does not manage Apple devices.
• You need Windows or Mac management. NounDesk manages Android phones and tablets only.
• Your staff use their own phones (BYOD) and you need a work profile. NounDesk manages company-owned devices only today. See work profile and BYOD for what to do in the meantime.
• Your phones run Android 7 or older. NounDesk needs Android 8 or newer.
• You want to track employee location during the workday. NounDesk reports location only while a phone is in lost mode, by design.
• You need remote control built into the console. NounDesk links your own TeamViewer, AnyDesk or Splashtop account instead; sessions run in that vendor’s app with your own licence. See remote support.

If none of those apply, the fastest test is to enroll two real phones during the trial, publish a policy, install an app, then try lost mode and erase on a spare device.

A short decision path

1. Write down your device count now and in a year, who owns the phones, what they are for and who will manage them.
2. Remove any vendor that does not support your device types or ownership model.
3. Score the remaining vendors with the checklist above, using the plan you would actually buy.
4. Trial the top one or two on real phones for at least a week.
5. Before you pay, confirm the price at your 12-month device count, monthly, with every feature you scored.

For the wider picture of running company Android phones, read Android MDM for small business: the complete guide. When you are ready to set up, follow the setup guide, and keep the Android device management checklist and the small business Android security checklist to hand.