IPhone enterprise setup - security concerns

Question

Dear all,
My company (3000+ users) is in the process of integrating the iPhone into the enterprise, and the ideal setup would be :
- OTA (Over The Air) sync of calendar and contacts with ActiveSync
- OTA push mail with ActiveSync
- ActiveSync policies enforcement (like passcode, etc...)
But :
- Users will have to sync their apps, music, photos, podcasts, ... from home; we do not wish to deploy iTunes on corporate computers; this could represent an important loss of productivity, and too much to cope with for our Helpdesk.
First question : does this make sense ?
Secondly, my concern as the company's security officer is : what happens to the corporate data when the iPhone is synced (and backed up) with the employee's private (aka. home) computer ? Does iTunes save Exchange data (settings, e-mails, calendar, contacts) to the computer ? If yes, is there a way to prevent this ?
Any answer would be greatly appreciated. Thanks.
jdm7

Answer 1

Cam you clarify your questions? What does "IT people warn that if include it in the server for sync will breach security on patients data" mean?
Do you mean if you sync with Exchange and there is patient info on the iphone? AHA.org says that encryption is not required, BUT it may be expected. IF Encryption is not required, but you do have patient data on the iPhone then you must at least:
1. Use SSL to sync with Exchange - this would protect the data in the air
2. Use the Apple Enterprise tools to force password lock on the iPhone and force a data wipe if so many incorrect passwords were entered.
That is at least at a minimum.