Mobile Device Management
in Lawrence County, PA

Lawrence County runs on a lot of phones and tablets that never sit at a desk, and that mobility is exactly where device management earns its keep. Home-health and hospice staff in the UPMC Jameson orbit carry patient data across the county on long rural routes. ELLWOOD and Ellwood City maintenance and field technicians, electrical contractors like the crews a firm such as Bruce & Merrilees fields, and service businesses along Route 422 and Route 65 all work from devices in trucks and on job sites. Westminster College's New Wilmington footprint adds campus-adjacent staff mobility. Mobile Device Management gives a county business central control over that fleet (configuration, security policy, app deployment, and lost-device response) without turning every phone into a help-desk ticket.

The conversation that has to come first with any BYOD program is privacy, because employees have heard that their employer can read everything on their phone and they are mostly wrong. On a properly configured work profile (Intune, Jamf, or Mosyle, depending on the device mix), the company manages only the work container: it can enforce a passcode, push and remove business apps, require encryption, and wipe company data, and it cannot read personal texts, browsing history, photos, or personal email. We configure the split deliberately and then explain it plainly to staff, because a BYOD rollout that employees don't trust is a BYOD rollout that quietly fails as people leave their work apps uninstalled.

For the clinical and home-health side, MDM is a HIPAA control, not a convenience. A lost or stolen tablet carrying patient information is a reportable breach unless the device was encrypted and could be remotely locked and wiped, and MDM is what makes both of those true and provable. We enforce encryption and screen-lock policy across the fleet, configure remote lock and selective wipe, and keep the documentation that demonstrates the safeguard was in place, which is the difference between a non-event and a breach notification when a device goes missing on a rural route.

The practical realities of a wide, partly-rural county shape the rest of the design. Cell coverage is uneven in the county's outer pockets, so we configure devices to tolerate intermittent connectivity and sync cleanly when they reconnect rather than failing in the field. Shop-floor and counter tablets get locked into kiosk mode so they do exactly one job and can't wander into the app store. And offboarding gets handled properly: when someone leaves, their access and the company data on their device are removed the same day, across both company-owned and personal devices, without a scramble to remember who has what.