Meraki Systems Manager Android app Privacy Policy
Who we are and scope of this policy
Meraki, LLC, a Cisco company, is the developer identified for the Cisco Meraki Systems Manager for Android application (the App) on Google Play. Cisco Systems, Inc. and its subsidiaries, including Meraki, LLC, are referred to in this policy as Cisco, we, us, or our.
The App is part of Cisco Meraki Systems Manager, Cisco's cloud-based endpoint-management solution for enterprise customers. This Privacy Policy describes Cisco's handling of personal and device data accessed, collected, used, stored, or shared through the App and the related Systems Manager service.
This policy supplements the wider Cisco Privacy Statement full policy and Cisco Meraki Cloud Service Offer Disclosure, which applies to Cisco solutions that link to or reference it. If this App-specific policy differs from the wider Cisco Privacy Statement with respect to the App, the Cisco Privacy Statement applies to that difference. The Cisco Privacy Statement continues to govern most privacy policy matters while this policy is for the Meraki Systems Manager app and its services on Android only. Please review the Cisco Privacy Statement for full Cisco policy coverage.
Data we access
The App and Systems Manager handle the following categories of data for the purposes stated below.
Location information
The Systems Manager app collects location data to enable the geofencing functionality and can collect location data even while the app is closed or not in use. This Geofencing feature allows Meraki Dashboard administrators to set configurations based on the device's location. Location data can be collected by the SM app while it is running, while the app is in the background, and/or while the app is closed or not in use. Location data is not shared with third parties or advertisers.
Systems Manager makes a best effort to estimate the location of a managed device, and an estimate may occasionally be inaccurate. Depending on the device, enrollment type, operating-system settings, permissions, and applicable configuration, Systems Manager may process:
- Precise location including GPS location;
- Approximate location including information derived from the device's most recent IP address or the location of a Meraki access point in the same Organization; and
- a location manually entered in Dashboard by an authorized administrator.
GPS is the most accurate location source available to Systems Manager. For Android Device Owner enrollments, GPS location may be enabled by default. For Android BYOD or Work Profile enrollments, the App requires the applicable Android location permission to use GPS location.
We use precise and approximate location to provide Systems Manager's managed-device location functionality, including helping an Organization locate, manage, secure, and support an enrolled device and, where enabled by the Organization, applying location-based security, compliance, or geofencing functionality. Location information is transmitted to the Systems Manager service and may be available to authorized administrators of your Organization through Dashboard.
Background location. When location-management functionality is enabled for an enrolled device, the App may access, collect, and transmit precise or approximate location while the App is open and while the App is closed or not in use. This processing supports the Organization's managed-device location, security, compliance, and geofencing functionality. We do not use location information collected through the App for advertising.
For more information on how Systems Manager services accesses device location please see the documentation or wider Cisco Privacy Statement full policy.
Device, system, network, and management information
We may collect and use information about an enrolled device and its use of the App, including device or other identifiers; device-management identifiers; device model, operating system, and configuration; serial number, IMEI, MAC address, IP address, or similar device/network identifiers where applicable; device status; connectivity and network-adapter information; security and compliance information; and telemetry.
We also collect the inventory of installed applications on an enrolled device. We use these data to enroll, identify, provision, configure, manage, secure, support, troubleshoot, and maintain managed devices and the Systems Manager service; to implement Organization-enabled app, security, compliance, and device-management features; and to protect Cisco, our customers, users, and services.
For enterprise device management, including Device Owner mode, Cisco may associate persistent device identifiers with managed-device data, including location information, only to provide the enterprise device-management functionality described in this policy. Cisco does not use those identifiers or location information for advertising.
SM owner identity
We may collect attributes to use for your SM Owner. These are created manually or synced by the Cisco Meraki administrator into your Dashboard. For use of the SM Owner identity features we may collect and use your name, email address, phone number, and user IDs associated with your Systems Manager enrollment or SM Owner account. We use this information to enroll and/or identify users and managed devices, provide App functionality, administer the Solution, provide support, and, for user IDs, perform analytics relating to the App and Solution. For more information on SM owners see the SM Owner documentation.
Files and documents
Where an Organization enables Backpack or similar content-delivery functionality, files and documents made available by the Organization may be delivered to a managed device from Organization-designated, internal, or third-party file-hosting services. This category is shared as necessary to provide the requested App functionality. Cisco, the Organization's authorized administrators, and the relevant Organization-designated content host or recipient may process those files and documents as necessary to provide that functionality.
App activity, diagnostics, and performance information
We may collect App interactions, crash logs, diagnostics, and other App-performance data. We use this information for analytics, to understand and improve App performance and reliability, to diagnose and resolve issues, and to help secure and maintain the App and Systems Manager service.
How we share data
Cisco may disclose the data described above:
- with your Organization and its authorized administrators, to provide its Systems Manager account and managed-device functionality;
- within Cisco and with service providers, authorized agents, contractors, and subprocessors that help us deliver, operate, host, secure, maintain, analyze, troubleshoot, or support the App and Systems Manager service;
- with Organization-designated or user-directed third parties when necessary to provide an enabled feature, such as the file and document functionality described above;
- when required or permitted by applicable law, legal process, or a valid governmental request; to protect the rights, property, and safety of Cisco, our customers, users, or others; or in connection with a merger, sale, financing, acquisition, restructuring, or similar transaction;
- in aggregated, anonymized, or de-identified form that cannot reasonably be used to identify you; or
- when we otherwise notify you and obtain any consent required by applicable law.
Cisco does not sell personal or sensitive user data collected through the App. For more information see the wider Cisco Privacy Statement full policy.
Legal basis, customer role, and your choices
Systems Manager is an enterprise service. In many circumstances, your Organization determines the purpose and means of processing data about its enrolled users and devices, and Cisco processes that data on the Organization's behalf to provide the solution. In those circumstances, your Organization is the appropriate contact for questions about its use of data, device-management settings, and requests concerning data it controls.
Where Cisco acts as a data controller, you may exercise applicable privacy rights, including rights to access, correct, delete, object to, or restrict certain processing of Personal Data, through the Cisco Privacy Request Form or as otherwise described in the Cisco Privacy Statement. Where Cisco acts as a data processor, we may direct you to your Organization, the applicable data controller, to act on your request.
Security
Cisco takes reasonable and appropriate steps to protect Personal Data entrusted to us. We use physical, technical, and organizational safeguards designed to protect data from accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access. Data transmitted from the App is encrypted in transit. We also require our applicable suppliers to protect data in accordance with their contractual obligations. For more information see the wider Cisco Privacy Statement full policy.
Retention and deletion
Cisco retains Personal Data for as long as needed to fulfill the purposes for which it was collected, including to provide the App and Systems Manager service, meet legitimate business requirements and legal obligations, resolve disputes, protect our assets, and enforce our rights and agreements. When there is no longer a legal or business need to retain identifiable Personal Data, we delete, destroy, anonymize, or remove it from our systems, subject to applicable law and our agreements with the Organization.
Organizations can use Systems Manager and Dashboard data-protection capabilities to request deletion, restriction of processing, access, and portability for applicable customer data. You may request deletion of data associated with the App through your Organization or through the Cisco Privacy Request Form. The applicable request path and outcome may depend on whether Cisco is acting as a controller or processor and on legal, security, and contractual retention obligations.
International processing
Cisco is a global organization. Data may be processed by Cisco, its subsidiaries, and service providers in the United States and other countries where they operate, in accordance with applicable law and the safeguards described in the Cisco Privacy Statement. Dashboard data-storage regions are selected by an Organization during account setup; see Cisco Meraki's data-storage information for current regional information.
Third-party services
The App may link to, interoperate with, or make content available from third-party services selected by you or your Organization. Those third parties are responsible for their own privacy practices. Please review their privacy policies before using their services.