Hi everyone,
I’m wondering about the technical aspects of the following.
I have an Android device set up with a user + a work profile. If I take a screenshot in an app installed in the work profile, it will be saved in the work profile’s storage and is not accessible to the user profile (this applies to all files/data stored by the work profile). This is intended behavior and I thus achieve full privacy of work data as it should never leave the work profile.
However, if I use a screen recording app installed in the user profile I can (while recording) switch to the work profile, open any app or file, and the contents of that will be saved in the recording inside the user profile.
I hereby lose full privacy of work data.
In my opinion, this bypasses the sandboxing between the profiles. Or am I missing something here? Is this intended behavior? Can someone explain to me the technical aspects of what is happening here? Or give some security/privacy documentation about work profiles and their separation from user profiles?
Thanks!