I can handle this. I activate BBs for my company.
Here is how it works. Your company will have the ability of dropping a policy on your phone. This means they can prevent you from downloading app or even adding additional email accts such as Yahoo, Gmail, etc. Our default policy does just this. We have exceptions to that rule though. I have the ability to temporarily unlock a device to allow a person to get updates or download an app that's needed. At any time I can totally wipe the device or see all the apps that are on it directly from the BES. I cannot see any data that is on the device though. So no, they can't see any pics, emails, notes or anything like that you may have. Once this policy is on your phone. No carrier can do anything to the device. It's locked in a sense. If you ever leave this company you have to be sure to get your personal device policy pushed back to vendor default or it's pretty much no good. Unless you know JL commander and can set it back. Carriers will not attempt this and always tells the cust to take the phone back to the company and have policy removed.