If it's the company's device, or they're paying the service, you can take whatever data you want from it. Just like a computer you use at your desk: at any time someone above you can confiscate it can do what they want with the data