A client sent confidential files to your personal phone

You’re a freelancer, a contractor or just the person a small business trusts. A client sends what they need you to work on, and it arrives the quickest way they know: a chat message to your personal phone. Payroll for twelve staff, a signed contract, a patient’s notes, scans of someone’s passport. You didn’t choose the channel, but now the files are on a phone that also holds your holiday photos, your family’s group chat and a cloud backup you set up years ago.

Where the copies are now

One file sent in a chat rarely stays as one copy. Depending on your phone and apps, it may be:

• in the chat app’s own storage, and in the chat on the client’s phone
• in your downloads, if you opened or saved it
• in your gallery, if it was a photo or a scan and the chat app saves media automatically
• in a cloud backup of your chats, your photos or the whole phone
• in a preview or cache of the app you opened it with

Handling the file properly means deciding where the one copy you keep should live, and removing the rest.

What to do now

1. Check your agreement. Contracts, data processing terms and professional rules often say how client data must be stored, for how long, and on which devices. If they rule out personal phones, tell the client and ask how they’d like you to proceed.

2. Choose one place for it. If your work has a managed device, a work profile or an approved storage service, use that. A work profile keeps work apps and files separate from personal ones on Android. Otherwise, use somewhere encrypted that you control, away from your gallery and chat.

3. Remove the other copies. Delete the file from the chat, from your downloads and from your gallery, and empty the deleted folder. If the chat app saved it automatically, turn that off. See stopping chat apps saving photos to your gallery.

4. Check your backups. If your chats or photos back up to a cloud account, the file may already be there. Remove it, or check that the backup is encrypted and only you can reach it.

5. Agree a better channel. A short, friendly note works: “Thanks, got it. For files like this, could you use a shared link or send an encrypted file next time?” The file encryption tool locks a file with a passphrase in your browser, and sending an encrypted file safely covers how to share the passphrase separately.

6. Delete when the work is done. When the job ends, delete your copy, and note the date. If the client asks for confirmation, you can give it.

What doesn’t help

• Forwarding it to your own email “to keep it safe”. That adds another copy on another server.
• Screenshotting a document to read it more easily. Screenshots go straight into your gallery.
• Leaving it in the chat indefinitely. Chats are easy to scroll through when someone borrows your phone, and they’re often backed up.
• Printing it at a shop. Many print shop computers keep copies of what they print.

If you can’t keep it separate

Some freelancers have only one phone. That’s common and workable. The steps above still apply. Keep a phone lock of six digits or more, turn on notification previews only when unlocked, so a client’s message doesn’t appear on the lock screen, and keep client files somewhere with a second lock.

Where a vault helps

Silo, coming soon to iPhone and Android, keeps photos, videos and, on Pro, files of any kind in an encrypted vault with its own PIN. A client’s documents can live there, away from your gallery, chats and cloud photo sync, and open only when you unlock the vault. When the job ends, deleting them in Silo moves them to its Deleted items, which are deleted for good after 30 days, or straight away if you choose Delete now there.