Mobile Device Management - Microsoft Intune

I work for a tech company. Don't get paid a stipend. I am trying to avoid a double cell phone scenario, but i might ask for a business phone. I have nothing to hide, but i dont want my banking info available, info wiped if i lose my phone, nor my constant location tracked.

The BYOD policies are encouraged because the security level we have is already high.

Never heard of Intune, but I deployed a different MDM at previous job. Technically some of them have the ability to basically take over your phone, but those types of policies are intended and only SHOULD be used for control over company owned mobile devices. One of the main purposes of MDM is to separate private data and company data. Your company probably had Exchange, and when you add the account you basically give them permission to wipe your phone. That's in case it gets lost they can wipe it so that company info isn't lost/unaccounted for. The problem is that it wipes the whole phone. On personal/BYODs you don't want to or at minimum don't care to wipe the whole deivce, just the corporate data. For example, if a problem employee with some highly confidential emails quits to go to a rival company or is fired, you want that corporate data on that phone removed ASAP. MDM provides a way to do that. MDM products are designed to segment all the corporate data so that it can be remotely managed while leaving whatever personal info on the phone alone. There are other features like pushing/blocking apps, geofencing, disabling features, pushing wifi/vpn policies etc.

The short answer to your question is it depends, and if you are concerned contact your company IT about what policies are pushed out by Intune. In reality IT folks don't give a shite what you do as long as it doesn't wreck their systems causing them to have to do more work.