[ecf]

MDMs can, but no employer in their right mind ever should actually take the steps to enable sms tracking.

I used to work in IT, and have rolled out MDM programs for startups before.

What needs to happen is a signed contract between the employer and the employee stating exactly what the current capabilities of the MDM are, and under what scenarios the employer can change those capabilities. This needs to be separate from their employment agreement.