FASmail - Privacy Concerns

Notice for Exchange Online Users

If you have migrated to Exchange Online, post-migration information and instructions are located on the M365 website User Guides webpage. The information on this page is for users of FASmail who have not yet migrated to Exchange online.

UBC IT has blocked the Microsoft Outlook for Mobile App, Proton Mail, CloudMagic, Cronofy+ and Edison Mail from accessing on-prem FASmail accounts. Currently, these apps are not compliant with UBC's information security policies and standards.

The main privacy concerns that were identified include:

  • The app stores a copy of the user's credentials on servers outside of Canada
  • After an account or app is deleted, application servers continue to attempt to retrieve email
  • The app does not enforce ActiveSync security policies (e.g. device passcode requirements, ability to wipe remotely, etc.)

These apps are in violation of UBC Information Security Standards. The use of these apps by employees handling Personal Information (PI) violates standards #2, #3, #5, and #7:

  • Password and passphrase protection
  • Transmission and sharing of UBC electronic information
  • Encryption requirements
  • Securing computing and mobile storage devices/media

Please refer to the University Counsel’s requirements for “Privacy of Email Systems” for additional information: https://universitycounsel.ubc.ca/subject-areas/access-and-privacy-general/useful-resources/

If you try to access your FASmail account through the Microsoft Outlook for Mobile App, you will not be able to sign in and you will receive an email notice that the connection from Microsoft Outlook for iOS or Android has been blocked due to security policies. You will encounter similar errors when using the other apps listed above.

If you have already downloaded one of these apps, we recommend that you immediately change your CWL password and delete the app. At this time, using the native email application on your mobile device is a safer option.

PLEASE NOTE: After the Exchange Online migration project is complete in 2025, the Outlook for Mobile app will be accessible as it integrates with Microsoft 365 using a more secure authentication method. We will keep this page updated with any new information we learn. We are currently reviewing other email applications to determine any other privacy or security concerns.

If you have any questions, please contact the IT Service Centre Help Desk at 604-822-2008 or fill in a Contact Form.