They authorize iPhones within their enterprise and create applications that only run on those phones.

The apps can be distributed only through their intranet.