office 365 security question

Hi Experts 
 
We just started with Office 365
 
And I want to know the best way to restrict our users to use any private device to access Office 365
 
Right now we don’t have any mobile device management, but we will have it soon (( Intune ))
 
I know that with conditional access I can restrict the access based on geographical location
 
But I don’t know what can do to forbidden our user to install Office 365 on their private devices
 
And even forbidden them to be able to access our Office 365 from a non-company device
 
Because I don’t want them to download data from our Sharepoint and one drive on their private devices