I agree with jstidrawa's post, I work and manage MaaS360 MDM and were soon changing over to Meraki's Systems Manager (MDM). We don't spy on anyone's device at all, we even have it in our policy that we are unable to view any other information on the user's device as well as verbally stating the same thing during a new employee's training. We use an MDM because it gives us access to selectively wipe the user's work email in case they lose their device, the device is stolen, or if the employee leaves the company. As we have a BYOD policy at my work almost all of the user's do bring their own devices and we also can provide devices if necessary but so far no one has wanted or had the need to.