An employee gives notice. HR schedules the exit interview, IT queues the laptop for wiping, and the phone goes into a drawer with a sticky note on it. Months later a dispute surfaces, and no one can say who has the authority to access that device or whether the data on it is still intact.
That scenario is a process failure that started long before anyone thought about collection. Departures are one of the most common triggers for litigation, from layoff claims to trade secret and noncompete disputes. Mobile data is often where the most relevant conversations live, and it is also the data most likely to disappear.
Why mobile data does not wait
Messages in iMessage, WhatsApp, and WeChat can be deleted, overwritten, or altered by retention settings and app behavior. Devices get reset, reissued, or replaced. Personal phones used for work leave the building entirely on the employee’s last day. By the time legal is asked to look, critical conversations may already be gone or incomplete.
What to do before the exit date
- Flag the matter early. If a departure involves a dispute, a layoff, or access to sensitive information, notify legal before the final day, not after.
- Decide on device status. Know whether the phone is company-issued or BYOD, and who has authority to access it.
- Define scope up front. Name the apps, the date range, and the participants that matter. Narrow scope protects personal content and strengthens proportionality.
- Collect while the employee is still reachable. A departing employee is far more likely to cooperate before the last day than after.
Collect only what the matter needs
Departing employees are often cautious about handing over a personal phone, and rightly so. A full device image pulls in family photos, health information, and private messages that have nothing to do with the matter. A targeted collection limited to specific apps, dates, and participants is easier to explain, easier to defend, and far more likely to earn cooperation.
ModeOne collects remotely and same day. The employee keeps the phone, nothing is shipped, and legal receives authenticated data with its metadata intact. The same process works whether you are offboarding one person or hundreds.
The takeaway
Offboarding is a preservation event. Teams that treat it that way collect cleanly, spend less, and avoid the scramble that follows when the data is already gone.
The full use case is available now. Download Employee Offboarding and Mobile Data, a preservation checklist for legal, HR, and IT covering what to decide, scope, and collect before a departing employee’s phone is wiped, reissued, or walks out the door.