This was also a personal device, not one provided by the company. Either the company should have provided a device, or the employee should _not_ be using a personal device.