Your employer might be spying on your tech. Here’s how to check.

Your employer may be able to see everything you’re doing on your phone or computer. They might know you’re reading this article right now. (Hi!) But how can you be sure?

Companies have a growing number of ways to keep tabs on workers. They can gather details from common workplace apps and use special monitoring software to see what’s happening on the company’s Wi-Fi. The goal may be to protect sensitive company information or track employee performance, but there are bigger privacy implications for the people being watched.

“There’s little transparency,” said Hayley Tsukayama, associate director of legislative activism at the digital rights group Electronic Frontier Foundation (EFF). “Even figuring out what is on your computer can be a huge step to figuring out how you want to deal with it.”

While there’s no foolproof way to know whether you’re being monitored, some techniques could provide insight, according to privacy and security experts.

Know what tech is riskiest

You’re at a higher risk for spying if you’re using a company-issued device, which offers the least privacy and will ultimately return to your employer, experts say. But you also could be exposed if you downloaded work software on your personal device or use their networks. To be safe, do these checks on any device or network you use for work.

Check your devices for tracking software

There are a few settings on your smartphones and computers that may allow for your workplace to remotely monitor you.

Check to see whether your device has mobile device management software, or MDM, installed. That allows your employer to remotely monitor your activities and take control of the devices. On an iPhone, go to Settings > General > VPN > Device Management. You should see a profile listed if your employer is using the software. On an Android, search for a setting called Device Admin Apps (the setting name may differ slightly depending on your device). On a Windows laptop, go to Settings > Accounts > Access Work or School. It’s under Privacy & Security > Profiles on a Mac.

Another way to check for software that employers use — also called “bossware” — is to review what’s running in the background on your laptop by checking your task manager or activity monitor, Tsukayama said. For quick access on PCs, press Ctrl + Alt + Delete. On a Mac, you can access the activity monitor by clicking on Utilities in your apps folder. Scroll through the list of running apps and Google the ones you don’t recognize.

Coworker.org, an organization that aims to support workers, offers a list of bossware and employment tech for which to look. Note that some programs may be invisible to you, Tsukayama said, citing EFF research.

Look for remote sharing settings, which would allow your employer to remotely control your device, including the microphone and camera, advises privacy researchers Diana Freed, a fellow at the Berkman Klein Center for Internet and Society at Harvard University, and Julio Poveda, a Ph.D. student at the University of Maryland. On Macs, it will be under System Settings > General > Sharing. On Windows, it should be under Settings > System.

Finally, check to see whether you are the administrative account for your device. Start-up screens may ask you to log in as a separate user than the administrator, or your computer may prompt you for an administrative password anytime you try to download an app. That could indicate your employer has control of your device, Tsukayama said.

Inspect your extensions and apps

It’s not just hidden apps and settings that are tracking you. Scroll through all of the applications installed on your laptop and research any you don’t know. Which are regularly asking you to install updates? Are you familiar with what those apps do? Were you ever asked to install an app for troubleshooting with your IT department?

“Be curious,” Tsukayama advised. “Also look for the marketing material for the app you find. They will often list, as features, the things they can do.”

Check your web browser extensions, recommends Mark Ostrowski, an engineering lead at cybersecurity firm Check Point Software Technologies. If you have browser extensions that are part of your company’s security tools, they will probably make themselves known, he added. A pop-up might warn you not to put patient information into ChatGPT, for example. Or it may say that it’s checking files you download for malicious content.

While these extensions usually monitor for security issues, things such as malware or the release of sensitive data, they can also track user habits. If the company decided to audit you, they may see that you’ve been spending half the day shopping on Amazon, Ostrowski said.

Also avoid downloading personal extensions on the same browser licensed to, he added. Don’t download the Garmin web extension to your company-provided Chrome browser if you don’t want your employer to be able to access your workout activities.

Understand your network

Using your company’s Wi-Fi or virtual private network (VPN) could also leave you exposed.

Even if you’re on a personal device on a work network, your employer may be able to see activities including messages, browsing activity and social media posts, Ostrowski said. Any traffic flowing through a company VPN, which companies often use for security purposes, can also potentially be monitored, Freed and Poveda said. Use your personal hotspot over company connections for personal activities. You can also use a personal VPN on a personal laptop without company software on the work Wi-Fi, Ostrowski said.

Don’t trust apps you use for work

A lot of what you do is collected by your workplace apps. Even if you don’t use company devices or networks, your boss still may be able to get a sense of what you’re typing, searching or saying.

Tools like Microsoft Office, Slack, Google Workplace and Zoom often track user activity for safety, security or compliance. But they also allow administrator accounts (that’s your employer) to retrieve information in some cases.

“If I [an employer] want to look at the content of the email that you’re sending through the corporate account, that can be done today directly between the [software provider] and the company’s security team,” Ostrowski said. “There’s no way for the employee to see that.”

That means your employer may be able to see an email you sent your doctor or a message to your colleague criticizing your boss. They could see how many meetings you attended and whether you had your camera or microphone on during them.

New AI technologies are coming that can offer companies new, more thorough opportunities for surveillance in the future.

A majority of Americans oppose the use of AI to evaluate performance (39 percent), track what people are doing on their computers (51 percent), and whether workers are at their desks (56 percent), according to a survey from Pew Research Center.

Know your rights

“Workers don’t have a lot of legal rights [here],” Tsukayama said. “So you don’t have much ground to push back.”

What can you do? Review your workplace policies. Not all employers will outline the surveillance they use, but some do, Tsukayama said. If you are part of a union, ask for guidance and rely on them when you have concerns. You can also ask the IT department directly.

The best protection? Keep your personal and work data separate. If you’re worried about your employer seeing your child’s baby pictures, sensitive medical information or flirtatious text messages to your partner, keep them off the devices you use for work, if possible. Even if it means carrying two phones.

“Once you put it out there, just assume it can be seen,” Ostrowski said.

Source