Whistleblowers are protected under laws like the U.S. Whistleblower Protection Act and various SEC and OSHA provisions, but those protections generally apply once a report has been made through proper channels — not during the period where you're quietly gathering evidence. That gap, between noticing wrongdoing and formally reporting it, is when your files are most vulnerable to discovery, and often when the stakes are highest.
Why This Evidence Is Uniquely Sensitive
- Company-managed devices: If you're using a work phone or laptop, IT departments and MDM software can have visibility into files, even ones you believe are private.
- Retaliation risk: Evidence discovered before a formal report is filed can be used to identify and retaliate against you before legal protections apply.
- Chain of custody: Evidence needs to remain unaltered and verifiable, which means it shouldn't sit in a shared or monitored location.
- Personal device exposure: Even on a personal phone, cloud backups and shared family devices can expose sensitive documentation.
Keeping Evidence Secure Until You're Ready to Report
Stash stores documents, screenshots, and recordings inside an AES-256 encrypted vault on a personal device, disguised as a calculator, fitness tracker, or music player, with no cloud sync that could expose files to a company-managed backup system.
Using a Personal Device, Not a Work Device
Legal and journalism ethics guides on whistleblowing consistently recommend documenting evidence on a personal device rather than company hardware, since work devices are frequently subject to monitoring, remote wipe, and IT access that a personal phone is not.
Keeping Documentation Off Company Cloud Systems
Because Stash never uploads files anywhere, screenshots and documents pulled from a work environment onto a personal phone stay off any cloud system your employer might have visibility into, whether that's a company Google Workspace or a shared iCloud family plan.
Consult Legal Counsel Before Reporting
Organizations like the National Whistleblower Center and the Government Accountability Project can connect you with attorneys who specialize in whistleblower cases. They can advise on what evidence is legally usable, how it should be preserved, and the safest reporting channel for your specific situation before you take any action.
Download Stash from the App Store