What's new 
During iOS enrollment, the Hexnode app asks for permissions like Photos, Camera, and Microphone. If a phone is lost and its location is not updating, can an admin retrieve photos from the device because those permissions were allowed? Trying to understand what Hexnode can actually access versus what the permission prompts are used for.
14 Views
Replies (1)
Marked SolutionPending Review
Hexnode Expert
3 weeks ago
Aug 21, 2026
Marked SolutionPending Review
Hello @elena ,
Hexnode UEM cannot retrieve, view, browse, or download personal photos from an iOS device, even if the user has allowed Photos, Camera, or Microphone permissions in the app.
Those permissions are used only within the app context. For example:
- Camera access may be used for enrollment-related actions such as scanning a QR code.
- Photos or file access may be used when the user intentionally attaches or uploads a file inside a managed workflow.
- Microphone access applies only to app features that explicitly require audio input.
Granting these permissions does not give an administrator access to the device’s camera roll, microphone recordings, or personal media library from the Hexnode UEM portal.
On iOS, personal data remains protected by Apple’s privacy and app sandboxing model. MDM can manage device settings, restrictions, apps, security actions, and certain inventory details, but it does not provide a command to extract personal photos from the device.
If the concern is a lost device, the recommended actions are device recovery and security actions such as location tracking, Lost Mode where supported, or remote wipe. These work independently of any photo access permission.
Regards,
Simon Scott
Hexnode UEM
Save