GrapheneOS. Use a work profile. Segregate your work from your personal information. As far as the employer is concerned, they have full control over your device. They can even send a wipe command to it and it would only affect the work partition, leaving your personal data alone.
My favorite tool for managing this is an app called Shelter. Graphene has robust profiling support, but I don’t want to have to swap in and out of something to see info. Shelter allows you to clone apps from your main profile to your work profile. You don’t even have to set up Google Play Services with an account if you don’t want.
GrapheneOS. Use a work profile. Segregate your work from your personal information. As far as the employer is concerned, they have full control over your device. They can even send a wipe command to it and it would only affect the work partition, leaving your personal data alone.
My favorite tool for managing this is an app called Shelter. Graphene has robust profiling support, but I don’t want to have to swap in and out of something to see info. Shelter allows you to clone apps from your main profile to your work profile. You don’t even have to set up Google Play Services with an account if you don’t want.