How should I set up a customer-facing kiosk tablet?
Use full-screen kiosk mode with one app, hide the Play Store, disable screenshots and anything else a visitor could misuse, and keep the device on a locked policy. Customers then see only the screen you intend. Staff manage and update it from the dashboard rather than touching the device.
A customer-facing screen, such as a sign-in kiosk, a feedback tablet or a product finder, is handled by strangers. It needs the strictest setup. Use full-screen kiosk mode so the interface itself is locked to one experience.
Add policy switches that match the risk. Disable the camera and screenshots unless the app needs them. Disable Bluetooth, outgoing calls and SMS. Lock Wi-Fi settings so no one changes the network. The always-on hardening blocks factory reset from Settings, safe mode, developer options, adding users and uninstalling Skie.
Think about physical security too. Skie alerts the admin immediately, down to the exact device, if anything gets through, and a missed check-in counts as a breach. Location and geofences can flag a tablet that leaves the premises. A reset device asks for the Skie organisation's Google sign-in, so it is of no use to whoever took it.
Customers may also expect privacy. If the kiosk collects any personal data through your app, that is your app's responsibility, and general information only, not legal advice. A practical tip: put a printed note on or beside the kiosk saying who runs it, and keep an admin-only way to change it documented. See how to exit or disable kiosk mode as an admin.