When you add a work email address to your phone, you’ll likely be asked to install something called a Mobile Device Management (MDM) profile.
MDM is set up by your company’s IT department to reach inside your phone in the background, allowing them to ensure your device is secure, know where it is, and remotely erase your data if the phone is stolen.
MDM profiles, paired with device management tools, allow companies to track employee phones in a single dashboard.
In many cases, MDM gives companies the ability to track your location and install a corporate VPN. This means they can route your traffic through a network the company owns — and if they own that network, the company can monitor traffic on it, providing a one-way mirror into your life, with no way to peer back.