Lost iPad, Shared Apple ID
A healthcare clinic issues 45 iPads to staff for patient intake. The iPads are supervised and enrolled in MDM. Historically, the clinic signed all iPads into a single shared Apple ID to buy apps once. A nurse reports an iPad was left in a taxi. The clinic wants to locate it, lock it, and wipe it if needed. The MDM shows the device as enrolled but 'Last Check-in: 6 days ago.' The shared Apple ID is also used on personal staff phones. The clinic's legal team asks whether patient data on the device is at risk.
1. What can the clinic actually do with MDM given the device state, and what are the limits?
Read the worked answer
Because the iPad is supervised and enrolled, MDM can issue Lost Mode (lock + message), play sound, and remote wipe - but only when the device checks in. 'Last check-in 6 days ago' means commands queue until the device reaches the network; if it's offline or powered off, nothing executes immediately. Lost Mode and wipe are queued, not guaranteed.
Limits: MDM cannot locate a powered-off device; Find My via the shared Apple ID may help but is tied to that account, and the shared account complicates attribution. The clinic should issue Lost Mode and a wipe command now, understanding they execute on next check-in.
2. Assess the data-risk question for the legal team.
Read the worked answer
Risk depends on protections in place, not on the wipe command alone:
- If the iPad had a passcode and FileVault-equivalent (Data Protection) with a strong passcode, data at rest is encrypted; a thief without the passcode has limited access.
- If patient data was stored in apps with local caches and no passcode, risk is higher.
- The shared Apple ID means iCloud backups may contain clinic data and are accessible to anyone with the shared credentials - a significant exposure independent of the lost device.
The clinic should: confirm passcode enforcement, check whether the intake app stores data locally or only in a backend, rotate the shared Apple ID password immediately, and review iCloud backup contents. The wipe is necessary but not sufficient; credential rotation and backup review are the urgent steps.
3. What structural change should the clinic make to prevent recurrence?
Read the worked answer
Move off a shared Apple ID. Use Apple Business Manager with Managed Apple IDs (or device-based app assignment via Volume Purchasing) so apps are assigned to devices/users without a shared credential. Enable per-device passcode and lost mode policies, and require check-in frequency so device state is current. For clinical data, ensure the intake app uses a managed backend and doesn't cache PHI locally without encryption. Document an incident response runbook for lost devices that includes credential rotation, not just remote wipe.