You are third in line at the supplier counter when your hand finds the empty pocket.
You know exactly how it happened, which does not help. Gloves on all morning, so the phone rode on top of the lumber cart between cuts. Where is the cart? Still by the saw station? In the yard? You paid twenty minutes ago, so it is not with the truck. And the screen lock has been off since March, because gloves, because winter, because entering a PIN forty times a day got old.
For a civilian, a lost phone is photos and hassle. For you it is different in kind, and it is worth being blunt about what is actually sitting on that cart. Every client's name, address, phone number and email. Which of those addresses you have keys or codes for, written in the job notes where you sensibly keep them. What everyone owes you, what everyone paid you, what you charge. Quotes that competitors would enjoy. Signatures. Photos of the insides of other people's houses. A logged-in email account that can reset most of your other passwords.
That is not a phone. That is the filing cabinet, the ledger and the master key ring, in a device that fits in a pocket and gets set down forty times a day on other people's property, in trucks with the windows down, on counters in busy supply houses. Field work is the adversarial environment for phones. Most trades run that environment with the front door propped open.
The fix is not paranoia or a locked drawer at the office. It is layers, the same way you would secure a shop: a lock on the gate, a lock on the door, a lock on the expensive cabinet, and the assumption that any single lock can fail. Here are the four, working from the outermost inward, and the ten minutes it takes to set them all.
Layer 1: the device screen lock
Everything else is built on this, which is exactly why it is the one people turn off.
No screen lock means whoever picks up the phone is you: your email, your messages, your banking session, and every app that trusts an unlocked device. With one, a random finder gets a brick, and even a deliberate thief mostly gets hardware. Modern fingerprint readers have removed the glove excuse for most of the day (a half-second thumb press is not the forty-PINs-a-day tax it was), and a PIN backs it up for wet, dusty, bandaged days.
Set it, and set the auto-lock timer short: one or two minutes, not ten. A phone that stays unlocked for ten minutes after you set it down is unlocked for precisely the window in which phones get picked up. If your phone offers to stay unlocked in "trusted" conditions, be skeptical of trusting a truck cab that other people sit in.
This layer is also load-bearing in a specific way: Zeus will not even offer its own app lock on a device with no screen lock set. That is deliberate, and it is the next layer.
Layer 2: the Zeus app lock
Inside the device lock sits a second, narrower gate: an app lock on Zeus itself, so opening the business data means passing your fingerprint or the device PIN again, even on an already-unlocked phone.
What is it for, if the phone is locked? The gaps between layers. The phone you hand a client to show them yesterday's progress photos. The one you leave unlocked on the tailgate because you are using it as a radio. The teenager at home. The device lock protects the phone from strangers; the app lock protects the business from everyone who is legitimately holding your unlocked phone for some other reason.
Three honest details:
It is opt-in, and off by default. You turn it on in the app's security settings; nothing forces it. If your phone never leaves your possession unlocked, you may reasonably skip it. Most owners with a crew, kids, or a habit of handing the phone around should not.
It only appears on secured devices. No screen lock on the phone, no app-lock option, because on a device with no credentials, arming it could leave you locked out of your own unsynced work with no clean way back in. Fix layer 1 and layer 2 becomes available.
It uses what the device already has. Fingerprint, or the device PIN as fallback. There is no separate password to invent and forget.
The cost is one thumb-press each time you come back to the app. On a working day that is real friction, and it buys a real thing: the difference between "my phone is somewhere in that house" and "my client list is somewhere in that house."
Layer 3: the encrypted database
The first two layers assume the phone is being used as a phone. A more serious adversary skips the screen entirely: pull the storage, read the files, take the data without ever seeing your lock screen.
This layer you do not configure, but you should know it exists, because it answers the question the first two cannot. Zeus keeps its local, offline-first database (the whole point of which is that your business data lives on the device, signal or not) encrypted on the device. The key is held in the operating system's protected storage rather than sitting next to the data it unlocks. Someone who extracts the database file gets ciphertext, not your client list.
Offline-first and security pull against each other by nature: the more of your business works without signal, the more of your business is physically on the phone. Encryption at rest is what lets you have the first without donating the second.
Layer 4: the analytics switch
Smaller than the others, but it belongs to the same instinct: data that does not leave the phone cannot leak from anywhere else. In Settings, under Privacy, "Share Usage Data" controls whether anonymized usage analytics are shared at all. It is your call and it is one toggle; the app works identically either way. A field business runs on trust with its clients, and knowing exactly what leaves the device, and being able to say no, is part of holding up your end.
The ten-minute hardening checklist
Do this in the truck, today, in order:
- Set the device screen lock: fingerprint plus a PIN that is not a birthday or 1234. (3 minutes)
- Drop the auto-lock timer to one or two minutes. (1 minute)
- Turn on the Zeus app lock in the app's security settings. (1 minute)
- Check "Share Usage Data" in Settings › Privacy and set it the way you actually want it. (1 minute)
- Do the same for the crew. Every team member's phone with the app on it is another copy of the doors they can open. Make layers 1 and 2 on their device a condition of having the app, the same way a clean license is a condition of driving the truck. (rest of the ten, and worth every minute)
While you are at it, one non-Zeus item that punches above its weight: make sure the phone's find-my-device feature is on. Locating a phone on a lumber cart is a happier ending than replacing one.
And decide now what the crew does when a phone goes missing, because the plan you make at the supplier counter is not a plan. It can be one sentence:
"If your phone with the app on it goes missing (lost, stolen, or just maybe), you tell me the same hour, no blame, and we change your password and check the find-my-phone before we do anything else. The only wrong move is waiting until tomorrow."
The no-blame clause is not softness; it is engineering. A team member who fears the reaction sits on the loss for a day, and the day is the whole ballgame.
What does this not protect you from?
Security claims deserve the same honesty as an estimate, so here is the fine print, plainly.
No layer here is absolute. A phone taken while unlocked and in use defeats most of this: the mugging-mid-text scenario is the hard one for every phone on earth, and the short auto-lock timer is your main friction against it. It cannot stop the oldest exploit there is: a second phone photographing your screen. Encryption protects data at rest, not data you show someone. And the strongest stack on this page is defeated by a PIN that is your year of birth, told to the one person you should not have told.
What the layers buy is odds, not invincibility. Lost-phone incidents skew opportunistic (a finder, a casual snoop, a phone left on a counter) rather than a targeted theft of your business data specifically. Against those, this stack takes the outcome from "client list gone" to "hardware inconvenience," for about ten minutes of setup and a thumb-press tax you will stop noticing in a week. Locks on the shop do not make it burglar-proof either. You lock it anyway, because most burglars try the handle.
Frequently asked questions
Can I remotely wipe my business data if the phone is gone?
Wipe, no. There is no remote-wipe command in the app, and it would be wrong to imply otherwise. What Zeus does have is the control built for this exact moment. Settings › Security › Sign Out Other Devices, tapped from any other phone or computer you sign in on, cuts the missing device off — its session dies and it cannot renew itself — while the device in your hand stays signed in. That is an access cut-off rather than an erase: a phone that never reconnects keeps the copy it already has. Then use the phone's own find-my-device service to locate, lock, or erase the handset. This is also why the layers matter in that order: on a phone with a screen lock, an app lock and an encrypted database, the hours before you notice are hours the data spends behind three doors.
Is the app lock going to drive me crazy on a forty-touch workday?
It is one fingerprint-press per return to the app, roughly a half-second. Most people report it disappears into muscle memory within days, the same way the fingerprint reader itself did. If your day genuinely involves handing your unlocked phone to a helper to work inside Zeus, the better fix is giving that helper their own login with their own permissions, which is safer than any lock and cheaper than sharing yours.
My crew uses their own phones. Whose problem is security?
Yours, structurally: the data on their device is your clients', and your name is on the relationship. You cannot force settings on a personal phone, but you can make expectations explicit: screen lock on, app lock on, report a loss the same hour. Their login having only the permissions their role needs is the part fully in your control, and it caps what any one lost phone can expose.
Does any of this apply to other phones?
The app-specific layers described above (app lock, encrypted database, the analytics toggle) are statements about the Android app. The habits generalize to any device you run your business from: screen lock, short timer, find-my-device on, and a same-hour rule when something goes missing.
ZEUS