@bensbergav If your device has access to any information regarding customer's payment information, including a login to your merchant service account, then yes, it is required.
Otherwise, not to my knowledge.
While QB pushes SecurityMetrics as a PCI compliance provider, it's entirely possible to handle it yourself through self-certification. If nothing else, it's always best to shop around.