I believe some devices/MDM setups allow you to create an isolated space on an employee owned device. You then control that isolated space not the whole device. When the employee leaves that controlled bit can be removed without wiping the device.
No idea how effective/reliable/manageable any of that is since I've not implemented or supported that style of MDM setup. Only done full company owned devices myself.