Verizon demo phone MDM data wipe: Difference between revisions

Line 1:

everyone is overreacting to this

~~==Background==~~

Collery, who lives in San Francisco & works in healthcare, says he had been a [[Verizon]] customer for 22 years.<ref name="ars">{{Cite web |last=Brodkin |first=Jon |date=2026-06-12 |title=Verizon sent man a refurbished phone with MDM, then deleted his data remotely |url=https://arstechnica.com/tech-policy/2026/06/verizon-sent-man-a-refurbished-phone-with-mdm-then-deleted-his-data-remotely/ |access-date=2026-06-13 |work=Ars Technica}}</ref> In February 2026 he called the carrier about network problems including dropped calls, & Verizon shipped him a replacement for his phone, a [[Samsung]] Galaxy Z Flip7.<ref name="ars" /> Instead of a new device or a properly reset refurbished one, the phone he received was a store demo unit that had not been wiped before shipping. It carried the same kind of software that company IT departments use to monitor & control phones issued to employees.<ref name="ars" />

After the device later reset, on-screen messages made its status explicit. One read ''This device is managed. Property of Verizon has configured this device to be fully managed.'' Others said ''Device owned by Verizon'' & ''Protected with BricTECH.''<ref name="ars" /> BricTECH is a retail security & device-management product made by Sennco Solutions, an InVue company; Sennco markets it for managing company-owned devices & securing store display phones, & states that it supports Android.<ref name="sennco-brictech">{{Cite web |title=BricTECH |work=Sennco Solutions |url=https://sennco.com/product/brictech/ |access-date=2026-06-13}}</ref> Sennco's privacy policy for the BricTECH retail app describes an automatic reset routine for demonstration devices:

<blockquote>''Sennco DPC may sanitize devices on a predetermined schedule to give the end user a standardized experience. Sanitization may include resetting specific applications data and cache, clearing contacts, clearing sms messages and clearing call logs.''</blockquote><ref name="sennco-privacy">{{Cite web |title=BricTECH RTO App Privacy Policy |work=Sennco Solutions |url=https://sennco.com/brictech-rto-app-privacy-policy/ |access-date=2026-06-13}}</ref>

~~<gallery mode="packed" heights="200">~~

File:Verizon-mdm-sennco-brictech-product-page.png|Sennco markets BricTECH Device Management for controlling company-owned phones and securing store display units, and states it supports Android with remote wiping.

File:Verizon-mdm-sennco-privacy-sanitize-clause.png|Sennco's BricTECH retail app privacy policy states the software may sanitize demo devices on a schedule, clearing contacts, SMS messages, and call logs.

~~</gallery>~~

A device enrolled in MDM as a fully managed device can be erased from a server. In Google's Android Management API, the <code>enterprises.devices.delete</code> method, one of the API's deprovisioning methods, ''immediately deletes the device record'' & sends a wipe instruction; for a company-owned device that instruction triggers a factory reset.<ref name="android-mgmt">{{Cite web |title=Deprovision a device |work=Android Management API, Google for Developers |url=https://developers.google.com/android/management/deprovision-device |access-date=2026-06-13}}</ref>

[[File:Verizon-mdm-android-management-deprovision-wipe.png|thumb|center|upright=2.4|Google's Android Management API documents that the WIPE command triggers a factory reset on a company-owned device.]]

==Remote factory reset & data loss==

@@ Line 1: / Line 1: @@
 everyone is overreacting to this
-==Background==
-Collery, who lives in San Francisco & works in healthcare, says he had been a [[Verizon]] customer for 22 years.<ref name="ars">{{Cite web |last=Brodkin |first=Jon |date=2026-06-12 |title=Verizon sent man a refurbished phone with MDM, then deleted his data remotely |url=https://arstechnica.com/tech-policy/2026/06/verizon-sent-man-a-refurbished-phone-with-mdm-then-deleted-his-data-remotely/ |access-date=2026-06-13 |work=Ars Technica}}</ref> In February 2026 he called the carrier about network problems including dropped calls, & Verizon shipped him a replacement for his phone, a [[Samsung]] Galaxy Z Flip7.<ref name="ars" /> Instead of a new device or a properly reset refurbished one, the phone he received was a store demo unit that had not been wiped before shipping. It carried the same kind of software that company IT departments use to monitor & control phones issued to employees.<ref name="ars" />
-After the device later reset, on-screen messages made its status explicit. One read ''This device is managed. Property of Verizon has configured this device to be fully managed.'' Others said ''Device owned by Verizon'' & ''Protected with BricTECH.''<ref name="ars" /> BricTECH is a retail security & device-management product made by Sennco Solutions, an InVue company; Sennco markets it for managing company-owned devices & securing store display phones, & states that it supports Android.<ref name="sennco-brictech">{{Cite web |title=BricTECH |work=Sennco Solutions |url=https://sennco.com/product/brictech/ |access-date=2026-06-13}}</ref> Sennco's privacy policy for the BricTECH retail app describes an automatic reset routine for demonstration devices:
-<blockquote>''Sennco DPC may sanitize devices on a predetermined schedule to give the end user a standardized experience. Sanitization may include resetting specific applications data and cache, clearing contacts, clearing sms messages and clearing call logs.''</blockquote><ref name="sennco-privacy">{{Cite web |title=BricTECH RTO App Privacy Policy |work=Sennco Solutions |url=https://sennco.com/brictech-rto-app-privacy-policy/ |access-date=2026-06-13}}</ref>
-<gallery mode="packed" heights="200">
-File:Verizon-mdm-sennco-brictech-product-page.png|Sennco markets BricTECH Device Management for controlling company-owned phones and securing store display units, and states it supports Android with remote wiping.
-File:Verizon-mdm-sennco-privacy-sanitize-clause.png|Sennco's BricTECH retail app privacy policy states the software may sanitize demo devices on a schedule, clearing contacts, SMS messages, and call logs.
-</gallery>
-A device enrolled in MDM as a fully managed device can be erased from a server. In Google's Android Management API, the <code>enterprises.devices.delete</code> method, one of the API's deprovisioning methods, ''immediately deletes the device record'' & sends a wipe instruction; for a company-owned device that instruction triggers a factory reset.<ref name="android-mgmt">{{Cite web |title=Deprovision a device |work=Android Management API, Google for Developers |url=https://developers.google.com/android/management/deprovision-device |access-date=2026-06-13}}</ref>
-[[File:Verizon-mdm-android-management-deprovision-wipe.png|thumb|center|upright=2.4|Google's Android Management API documents that the WIPE command triggers a factory reset on a company-owned device.]]
 ==Remote factory reset & data loss==