What Should I Do If I Keep Choosing the Wrong Email Account When Sharing Files?

You select a file, tap Share, choose what looks like the right email app, and send it. Then you notice the message has gone from your personal account instead of your work account—or, worse, you are not sure where it went.

This is a common multiple accounts problem, especially on devices used for both work and personal life. It is also a preventable information-handling risk. A wrong-account send can expose patient or organizational information to an unapproved service, a personal inbox, or the wrong recipient.

The safest response is not to rely on a better memory or a last-second glance. Start with your employer’s rules, use only approved systems, and change the device habits that make the wrong choice easy. This guide offers practical steps, but it does not replace your organization’s policy or its incident-reporting process.

Start with your employer’s device and BYOD policy

Before changing account settings, find out what your employer permits. A personally owned phone or computer may be allowed for some work tasks but not for handling patient information, downloading attachments, or saving files locally. “I can sign in” does not necessarily mean “this device or service is approved.”

Check your organization’s policy or ask your manager, IT team, information governance lead, or data protection officer about:

Whether personal devices may be used for work at all, and which tasks are permitted.
Which email, file-sharing, messaging, and storage systems are approved for patient and organizational data.
Whether work files may be downloaded to a device, and where they may be stored.
What security controls are required, such as a passcode, encryption, device management, or remote wipe.
How to report information sent to the wrong account or stored in the wrong place.

The Information Commissioner’s Office (ICO) publishes UK GDPR guidance on working securely, including guidance relevant to working from home. Its practical security advice can help you think through access controls, devices, and the risk of information being seen by other people. However, the ICO does not approve a particular app for your employer. Your organization decides which systems are approved for its data.

Do not use a personal email account as a workaround. If the approved work system is unavailable, follow your employer’s downtime or escalation procedure. Do not forward a work attachment to personal email just to make sharing easier.

Use approved systems for patient and organizational data

For patient information and other sensitive organizational data, use the approved email and file-sharing tools your employer has provided. These may offer controls that consumer services do not, such as managed access, audit trails, retention rules, or the ability to remove access. A folder name, password, or “private” setting in a personal service is not a substitute for approval.

Also check whether email is the right way to share the file. A secure, managed link may be the preferred method, but only if your organization permits it and you set access correctly. Confirm that the recipient is authorized, choose the intended access level, and avoid “anyone with the link” settings unless policy explicitly allows them.

Keep the amount of information shared to what is needed. Before sending, check the file itself, not just the message: confirm the correct patient or case, remove unnecessary content where appropriate, and make sure you have selected the intended attachment. A correctly chosen work account can still send information to the wrong person.

Situation Safer next step Work account is missing from the share options Stop and check the approved method with IT or your manager. Do not send through a personal account. You are unsure whether the device is approved Do not download or share sensitive work files until you have checked the BYOD policy. A file has already gone to the wrong account or recipient Follow your organization’s incident-reporting process promptly. Do not rely only on deleting the sent message.

Reduce the multiple accounts problem

Many apps remember the last account used, rather than the account you meant to use. Some share menus also pass a file directly into an app without showing the account that will send it. That makes account confusion a design problem as well as a user habit.

Set a default account only if policy allows it

Review the email app’s default account settings. If your employer permits work email on that device, you may be able to set the managed work account as the default for new messages or sharing. The exact steps depend on the app and device.

Do not assume that changing the default solves the problem. An app may use one default for composing email and another account for a share-sheet action. A file may also be handed to a different app than the one you expect. Test the settings with a harmless file and a test recipient, using your organization’s rules. Never use patient data as a test.

If your employer does not allow work email on a personal device, do not add the account just to make the menu more convenient. Ask for the approved alternative, such as a managed device or an authorized work portal.

Remove unnecessary accounts or sign-in paths

If policy permits, reducing the number of accounts available in a work app can reduce the chance of a wrong selection. You might sign out of a personal account in the email app used for work, or keep work and personal accounts in separate approved apps or profiles.

Do not remove an account or change device management settings if it could interfere with employer controls, access, or retention obgynkey.com requirements. If you are unsure, ask IT first. A clean-looking screen is not worth breaking a required security setup.

Build safer share menu habits

The share menu is a high-risk moment because it encourages quick taps. Build a short pause into the process. The aim is not to inspect every setting on every tap; it is to check the details that determine where the information goes.

Check the file. Confirm that it is the intended document and does not contain extra pages, comments, or unrelated records.
Choose the approved app or service. Do not select the first mail icon or messaging app simply because it appears at the top.
Check the sending account. Look at the From field or account indicator before sending. If the account is not clear, stop and open the approved app directly.
Check the recipient. Verify the full address or authorized recipient, especially when autocomplete offers similar names.
Check the sharing permission. For a link, confirm who can open it and whether access expires or can be revoked, if those controls are available and required.
Pause before the final send. Read the recipient, account, and attachment once more. Then send only if all three are right.

Keep a note of the “easy mistakes” you notice. For example: tapping the mail icon in the wrong row, choosing a recently used personal account, or sharing from a photo app that has its own account selection. Change the habit that caused the mistake. If you repeatedly tap the wrong item, rearrange the share options only if your device and employer policy allow it—or avoid that route and use the approved work app directly.

Separate entertainment from clinical work

Using one device for work and entertainment can make the wrong account easier to choose. It also increases the chance of a work notification appearing while someone else is looking at the screen, or a personal app receiving a work file through an unintended share action.

Where your employer allows BYOD, use any approved work profile, managed container, or separate work app area. These tools can create a clearer boundary between work and personal apps. They do not make an unapproved service safe, and they do not replace your organization’s rules.

Keep patient and organizational files out of personal photo libraries, notes apps, consumer cloud drives, and entertainment apps.
Do not copy work content into personal messaging apps to make it easier to find later.
When finishing a work task, close the work app or sign out if your policy requires it.
Avoid sharing files while distracted, rushed, or switching between personal and clinical tasks.

If you cannot keep the work and personal use safely separated on your device, ask whether you should use a managed device or a different approved method instead.

Protect lock screen previews and notifications

Even when a file is sent correctly, notifications can reveal information on a lock screen. A message preview may show a sender, subject line, or part of the content to someone nearby. On a shared or unattended device, that can expose information without anyone opening the email.

Review notification settings for work email and messaging apps. Consider hiding content on the lock screen or showing notifications only after the device is unlocked, in line with your employer’s policy. Check this on the actual lock screen: send a test notification containing no sensitive information, lock the device, and see what appears. Settings labels can be misleading, and the result may differ between apps.

Use a strong device passcode or other approved screen-lock method, set a short automatic lock time, and lock the device when you leave it. If family members or other people use the same device, follow your employer’s rules before accessing work systems on it. Do not assume that a separate folder protects information if other people can unlock the device or open the app.

If you have already sent a file from the wrong account

Act promptly. Do not wait to see whether the recipient notices, and do not assume that deleting the message or attachment reverses access. Follow your organization’s incident-reporting procedure and contact the appropriate manager, service desk, information governance team, or data protection contact.

Give a clear account of what happened: what information was involved, which account and recipient were used, when it happened, and whether the file was attached or shared by link. If a link was used, ask the relevant team whether access can be revoked. Do not try to conceal the error or conduct your own investigation by contacting an unintended recipient unless your organization instructs you to do so.

After the immediate report, review what caused the mistake. Was the wrong account preselected? Did the share menu bypass the usual account check? Was the device outside the approved setup? Tell your team what would make the safe option easier. Repeated near misses may indicate that the process or device configuration needs to change, not just that an individual needs to “pay more attention.”

A practical routine for the next share

Before your next file share, confirm that your device and method are allowed for the information involved. Use the approved system, check the sending account and recipient, and verify the file or link permissions before sending. Keep work separate from personal apps where policy permits, and hide sensitive notification previews on the lock screen.

If you still keep choosing the wrong account, stop using that share-menu route for work. Ask IT or your information governance team for a safer, approved workflow. A small change to the process is more reliable than hoping the right account will be selected next time.

ICO guidance to consult

For UK GDPR security context, see the ICO’s guidance on security and its advice on working from home securely. Use this alongside your employer’s current policies and local reporting arrangements. If you cannot find the relevant policy, ask your manager or information governance team before sharing sensitive information.