This is par for the course in BYOD regimes. On a past job, I was once given the option -- not required -- to install an app called "Good" on my phone to grant access to corporate email and messaging through my phone. I found out that "Good"'s real purpose is Mobile Device Management -- tracking and controlling phones that connect to the corporate network, including forcing software installs and updates, remote monitoring of device and app activity, and installing certificates that let corporate IT MITM your device.

I told the IT department that if they want me to receive email via cellphone, they will need to provision a corporate phone for me to use because I am not installing anything of theirs on my personal device.

I never heard about it again.