A user enrolled their personal iPhone in the organization's MDM solution.

Apple differentiates betweenUser Enrollment(for BYOD) andDevice Enrollment(for organization-owned devices). For personal devices enrolled throughUser Enrollment, MDM has limited capabilities to protect privacy. Apple Learning emphasizes that MDM cannot track personal location data, cannot wipe the entire device, and cannot disable user features like Activation Lock. However, MDM retains control over organizational data and canenforce a device passcode requirement. This ensures that managed apps and accounts are protected by encryption at rest. If the user removes the passcode, the device will become non-compliant, and organizational data may be removed. This limited but critical control balances enterprise security with personal user privacy.