You know the moment. Your last day. The cardboard box on your desk, the badge you hand back at reception, and then the laptop — the machine you have lived inside for two, three, five years — sliding across the counter into someone else's hands. You smile and say thanks, and all the way down in the elevator a thought catches up with you: the photos you saved to the desktop that one weekend. The personal email you answered during lunch. The chat tabs you never logged out of. The browser history you never thought of as history at all.
That machine was never your desk drawer. It was a loan, and the loan just ended.
WATCH · 29 SECONDS
Almost everyone has a secret. Almost no one has a safe place for it.
See how Everkeep keeps your most private data offline — numbered, sealed, and watched.
Start protecting — CAD 187/yrThe laptop you called "mine"
We all do it. The work laptop is faster than the old one at home, the screen is bigger, and it's right there. So the boundary blurs a little at a time. A personal message answered between meetings. A few photos moved over because the phone was full. A private account logged in once, and then never logged out, because logging in again every morning is a nuisance. None of this is carelessness. It is convenience, doing exactly what convenience is designed to do: make the easy thing feel harmless.
But "my laptop" was only ever a figure of speech. The machine belongs to the company. The software on it belongs to the company. And the management software the company installed on it — the mobile device management tools that every large employer uses — gives the company the ability to lock the machine remotely and wipe it entirely, whether you have left the job or simply lost the device. That is not a secret capability. It is a standard, documented product feature, listed in the open as a selling point for IT departments.
So the question is not whether someone can open that laptop after you hand it back. The question is why you ever believed they couldn't.
The delete button is a story you tell yourself
Most people's plan, if they have one at all, is to clean up before the last day. Delete the files. Empty the trash. Clear the browser. It feels thorough, and it is almost entirely theatre.
Delete one copy and three more remain. The company backup holds yesterday's version of the drive. The cloud sync you enabled — because it was convenient — holds a copy on a server somewhere, attached to an account the company administers. The management software holds logs of what was installed, when, and where. And the law, in the United States, treats data sitting on a third-party provider's servers as something that can be reached by subpoena under the Stored Communications Act. A "private" folder in the cloud is not a private room. It is a room in someone else's building, with a door that legal process knows how to open.
This is the part people find hardest to absorb, because it contradicts how the machine feels. A laptop feels private. It sits on your desk, it remembers your passwords, it greets you by name in the morning. But feeling private and being private are different things. Seneca, who spent his life advising powerful men on what they actually controlled, would have recognised the error at once: we confuse what we use every day with what is ours. Use is not ownership. Access is not possession.
What a clean line actually looks like
Work belongs to the company. That part is easy, and nobody sensible disputes it. The hard part is the other side of the line: the things that belong only to you, and that must never sit on hardware someone else owns, in an account someone else administers, or in a cloud someone else can be compelled to open.
A clean line has to be physical, not contractual. A line in a user agreement — a retention clause, a privacy policy, a promise that your data "will not be accessed except as necessary" — is a line someone else drew, and someone else can redraw. A physical line is different. If the thing that must not be found does not live on any device with a login page, there is no login page to be opened. If there is no server copy, there is no server copy to be subpoenaed. If the only copy sits in a sealed, numbered container that no remote command can reach, then a remote wipe is a command shouted at an empty room.
That is what a professional custody arrangement is for, and it is worth describing plainly, because the value is in the process rather than in any piece of technology. You prepare your own media yourself, and it is received, numbered, and sealed — a brass seal, stamped with its number — under the eyes of two people who verify each other's work, and photographed so there is a record of exactly what went in and in what condition. It is then kept, attended, by people whose job is custody, not convenience. Twice a year, the seal and the outside of the container are visually checked and photographed, without the container being opened or touched inside — a check that confirms the seal is intact and nothing has been disturbed. Anything more hands-on than that happens only if you ask for it in writing, in advance. Nothing about this is dramatic. That is the point. Drama is what you get when the line was never drawn.
Hand the laptop back with nothing left on it
There is a particular calm that comes from knowing exactly what is where. The work laptop goes back clean, because there was never anything of yours on it that mattered — the things that mattered were never allowed to live there in the first place. The work email holds work. The personal life, the things you would not want a future IT administrator, a future employer, or a future legal process to browse through, lives somewhere no login page reaches.
Arendt once observed that privacy is not secrecy for its own sake; it is the space in which a person becomes who they are, away from the gaze of institutions. The company laptop, for all its familiar keyboard and its morning greeting, is an institution's instrument. It was never a private room, and no amount of deleting will turn it into one.
So draw the line before the last day, not on it. Work goes back to the company. What is yours goes somewhere that is actually yours — sealed, numbered, verified by two sets of eyes, and kept by people whose whole job is to keep it untouched. The elevator ride down is much quieter that way.