How do I stop rented or issued devices being resold?

Skie for Enterprise · Updated

Short answer

Block the reset, tie the device to your organisation and record its identity. Skie blocks factory reset from Settings, and Android's Factory Reset Protection asks a wiped device for the Skie organisation's Google sign-in, which only Skie holds. A reset device is of no use to whoever took it. IMEI and serial are recorded for reports.

Resale usually depends on one step: wiping the device so the next buyer can set it up as new. The defence is to make that step useless.

Skie does that in layers. Factory reset from Settings is blocked, safe mode is blocked, developer options and adb are blocked, and the Skie app cannot be uninstalled or force stopped. If someone reaches the recovery menu and wipes the device anyway, Android's Factory Reset Protection is on and is tied to the Skie admin account. The wiped device asks for the Skie organisation's Google sign-in before it can be set up again, which only Skie holds. So the device is of no practical use to the person who took it. We do not claim it is impossible, only that the reward is gone.

Identity is recorded by IMEI and serial. If a device is reset and then re-enrolled, it is recognised, and does not take a second seat. If it goes missing, lost mode locks it, shows a contact message and starts tracking, and gives you an evidence file with IMEI, serial, SIM details and the location trail for a police report. You can mark a device found and return it to normal.

Add the human layer as well. A written agreement that the device remains the property of the organisation, a record of who was given which device in the lifecycle history, and a geofence on the area where it should be.

Skie does not offer remote erase of a lost device yet, so plan data handling at the app level.