I can think of so many countermeasures. - Append a null byte to the end of your files, giving them a unique hash value. - Disallow internet access to the appl

I can think of so many countermeasures. - Append a null byte to the end of your files, giving them a unique hash value. - Disallow internet access to the application. - Spoof the server using DNS tricks and control what is sent and received. - Reverse engineer the application to make it look as if it's working while it actually isn't. - Sandbox the application. - Use an alternative phone for all of your "sensitive" activities. - Don't keep "sensitive" information on phones, rather store on an encrypted computer. - Use an old burner phone. So not only is the policy utterly disgusting, it's also completely ineffective. A small blessing perhaps.