Work-necessary software probably involved an enterprise provisioning profile, which for all intents and purposes, gives the holder of the profile full rights to your phone.

As for social, why isn't this happening on Android if it's so inevitable?