Generally: If someone has physical access to a device, you can probably assume they control it.