Don't forget about cloud. Photos, notes, etc can be seen by anyone who knows credentials used on corporate devices.