Limit access to contacts on managed devices

Learn how to use Mobile Device Management (MDM) to choose which apps can access contacts.

This article is for system administrators.

In iOS 11.3 and later, use MDM to prevent unmanaged destinations from accessing contacts associated with managed sources. The following restrictions apply to contacts:

These restrictions prevent unmanaged apps from accessing contacts from managed accounts, and prevent managed apps from saving contacts to the local Contacts app.

Unmanaged destinations

  • Unmanaged apps
  • Unmanaged contacts and email accounts
  • Local storage like On My iPhone contacts and notes


Managed sources

  • Managed apps
  • Managed accounts

Changes in iOS 12

In iOS 12, you can use MDM to make the following exceptions to this policy:

  • Allow unmanaged apps to access managed contacts
  • Allow managed apps to save contacts to the local Contacts app

Get more help

For additional instructions, contact your MDM vendor.

Published Date: