Verizon made a serious error when it sent a customer a refurbished phone that still had a Mobile Device Management (MDM) profile installed. The software gave the company remote control over the device, and it eventually deleted all of the customer's data.
Tom Collery called Verizon in February because he was having network problems, including dropped calls. The company responded by sending him a replacement phone, a Samsung Galaxy Z Flip7. Instead of a properly wiped refurbished device, Collery received a store demo unit that was still managed by Verizon's MDM software.
MDM is typically used by companies to monitor and control company owned devices. In this case, it allowed Verizon to remotely trigger a complete reset of the phone after Collery had been using it for a couple of weeks. All of his data was erased without warning.
The incident raises serious questions about Verizon's process for preparing refurbished devices. A demo unit should have been wiped clean of any management profiles before being sent to a customer. That clearly did not happen here, as the original outlet reported.
This is not just a customer service failure. It is a technical reality check for how much power MDM tools hold. When organizations retain administrative control, they can accidentally or intentionally wipe user data. This mirrors broader trends in enterprise tech where centralized management often overrides individual user agency.
For enterprises using AI or cloud tools, this is a warning about data sovereignty. If your IT department can push a config that bricks your device, they can also push one that erases your local cache or synced files. You must know what is running on your hardware.
What this means for you
Always audit the software on any company-issued or refurbished device before using it for personal sensitive tasks. Verify that no MDM profiles or remote management agents are active. You can use this prompt with your AI assistant to create a checklist: "Create a step-by-step guide for checking a Samsung Galaxy device for active Mobile Device Management profiles and remote wipe capabilities before use."
