The application is used injunction with an internal server, that pulls the information for the person signing into / registering for the application.
The data that is pulled to the device is for the individual that has registered for the application, the registering process check to see if the individual has an active account in the internal system before allowing the user to fully register the account / device.