Can MDM read users' messages and photos?

ABMDM Editorial Team. Published: 02/11/2026.

Can MDM read users' messages and photos?

According to ABMDM's policy, no: ABMDM states it cannot see your messages, calls, photos or passwords, and the two Apple query lists we read (device information, installed apps) contain no such items either. But MDM does know some things about a device, such as the serial number, battery and installed apps, and it can lock or wipe a device remotely. This article separates two questions: what MDM can ask a device, and what ABMDM collects.

One thing to say plainly: the Apple pages we read contain no sentence like "MDM can never read content". Apple lists what MDM can query, and its personal safety guide notes that MDM tools "may allow access to data or location information on the device" (Apple). So the right answer depends on what the managing party uses and commits to.

What can MDM ask an iPhone?

The two Apple query lists we read:

• Device information: serial number, device name, model, battery level, available capacity, supervised status, Find My, Managed Lost Mode and some settings (Apple: device information queries).
• Installed apps: name, size, identifier, version (Apple: installed app queries).

Neither list has a group for message content or photos. That is what the lists show, not a guarantee from Apple for every system.

How is a supervised device different?

Apple describes supervision as a sign that the device is owned by the organisation, giving it extra control over configuration and restrictions (Apple). Administrators can turn off AirDrop, block the App Store, or apply configurations such as web filtering (Apple Support).

On a supervised device, Settings shows a line saying the organisation can monitor internet traffic and locate the device. That is Apple's transparency notice about capability, not proof that a specific party is doing it. More in what a supervised iPhone is.

What does ABMDM collect, and what can it not see?

According to ABMDM's security page and privacy policy:

• Collected: device information (serial number, model, OS version), management status, command history, apps and configuration installed by the organisation. The policy also lists IMEI, capacity, battery, and the SIM's phone number and carrier.
• Cannot see: messages, calls, personal email; photos, videos, files on the device; browsing history, passwords.
• No sale of personal data and no sharing with third parties for advertising.

This is ABMDM's commitment, so read it alongside the contract you signed with the shop or company, which decides the purpose of processing your data.

Device location: when is it collected?

Apple says location is available only in Managed Lost Mode on supervised devices. An administrator can request the current location even when Location Services is off, and the user is informed when the mode ends (Apple).

ABMDM collects location only when a device is in Lost Mode, or when an instalment or rental contract is overdue and you agreed in the contract. Every view is logged: who, which device, when.

Check whether your phone is managed

• Go to Settings, General, VPN & Device Management. If nothing is listed, Apple says no management profiles are installed (Apple).
• A supervised device shows a notice at the top of Settings (Apple Support). Check both places, since each shows only part of the picture.
• When buying a used phone or receiving one, enter the serial number on the device lookup page. It only tells you whether the device is in the ABMDM system, not other vendors' systems.