Sounds like it was a personal device that had access to work email. That's a whole other issue that I wish had a better option than "adding your work accounts lets anyone using the phone see them."