When using Mobile Device Management (MDM), it is possible to restrict access to contacts on managed devices. Please see https://support.apple.com/en-us/101932
According to this article, contacts are considered "managed" if they come from either a managed app or a managed account.
Does this principle also apply when an MDM-managed app provides contacts via the Contact Provider Extension (CPE)? Specifically, would such "managed" contacts remain inaccessible to unmanaged apps? Our goal is to ensure that unmanaged apps cannot access these contacts.
Thanks!