Cell phone usage

Good morning everyone! I work in a nursing home in Pennsylvania. The new company policy is making me use my personal cell phone for the log in to my work computer. I have to download an app that send a code to my cell phone that I have to input to my computer. Is this legal? Can they do this with our paying a % of my bill? Please and thank you