The only recommendation I can provide is a Google Pixel device with GrapheneOS. Graphene is only designed to work on Pixels because they are (allegedly) the most secure mobile phone hardware-wise. Once you flash Graphene, it's up to you to install any apps beyond the basic browser (Vanadium), gallery, camera, caller, SMS, PDF viewer, contacts, file manager, and security/system apps. No Google involved without your permission, though you will have to install Google services, available via a Graphene mirror and sandboxed for privacy, IF you want to install an eSIM after flashing Graphene. If you're interested in further information, please let me know. I use it, love it, and am happy to provide any information you may need to decide if it's a good fit for you or not.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
Not OP but interested in both privacy and high-tech features. My current (stock) pixel 4a device has a worse camera than many other phones, but the software compensates a lot, netting better picture quality overall very often. I'm wondering how much of that is lost when using graphene instead of stock android, do you know?
Similarly with the latest gen pixels having AI features built in, I'm assuming much of that is software that's not as easily installed somewhere else..
I'm not sure what the GrapheneOS stock camera app does under the hood, but if it's not enough for you, you have the option of installing Google's Pixel Camera app from the Play/Aurora store if you want to compare. I don't imagine it would require Google Play Services to run on devices older than 8 since they don't have the AI integration, but I could be wrong. You can easily deny the app network permissions to ensure that the app isn't sending your photos to Google. As far as the AI features go on newer devices, I could see those requiring Google Services installed to work, but again, they're available through a Graphene mirror, run sandboxed for privacy, and can be denied network permissions. I'm satisfied with how my pictures turn out (7 Pro), but I may try Pixel Camera out just to see what the difference is.
If you do that I'd be very interested to see the results! Especially things like night sight, my gf's camera is as night blind as she is 😅
What is the root scene on Graphene? I know the dev is pretty against it but I like having root access after being used to it. Is it possible to easily root it without any integrity issues later on?
It's not supported. According to the devs rooting defeats the purpose of Graphene OS.
It looks like the verified boot security feature of Graphene effectively prevents rooting the OS. I understand wanting root access, it does provide some nice features, but I don't have any need for it. I don't have any bloatware embedded to remove, and I don't need to mod any system apps, so I haven't looked into it much. I know the dev says it isn't planned because it massively increases attack surface, which I personally agree with, but it would be nice to have the option via a separate version of the OS or something. If you need root access, I would suggest looking into LineageOS. It's similar in privacy to Graphene and last I knew could be rooted. Graphene is very focused on security as well as privacy, and for me is a best of both worlds, but if you want to modify the system for various power-user type features, it might not be for you.
Yeah I'm currently running LineageOS. I wanted root mainly for adblock (modifying /etc/hosts) and AppOps. Does Graphene have those features built in?
Check out DivestOS. It's a fork of lineage with a focus on better security and privacy. Not restrictive like Graphene. Rootable via magisk.
So far I'm liking it. Great battery life (lowest I've ever seen) even on my 5 year old phone.
You can root on GrapheneOS. You do it exactly the same way you'd do it for the stock Google ROM:
- Have an unlocked bootloader. Yes, this means that it """defeats the purpose of GrapheneOS""", if the purpose of GrapheneOS isn't for you to avoid Google's privacy nightmare. I use GrapheneOS for privacy moreso than security, and not being able to block ads properly is irritating.
- Install the Magisk app.
- Extract the
boot.imgfrom the GrapheneOS image and patch within Magisk. - Flash the patched boot image in the bootloader.
The main annoyance with this is that you'll have to do that dance every month when a security patch gets released, but for me, it's better than vomiting from exposure to ads on mobile.
Get a used pixel for $100. Factory reset on arrival, and install Graphene OS. Do not install gapps.
+1 for pixel. I just ordered a 7a for grapheneos.
everyone's recommending Pixel. That's good to know.
ok but we're all here because we're interested in privacy, so please tell me what does Google Pixel have anything to do with privacy??
"Google" & "Privacy" are contradictions.
GrapheneOS, a privacy/security focused operating system is compatible with a limited amount of devices. The pixel series is part of those compatible devices.
They use Graphene. That's the point. Pixels are unfortunately the only supported devices. That's why I won't use Graphene as I would never support google. A pity, many do
People or rather I didn't buy pixel as its more privacy friendly but its the only one available here that let's me install another ROM on day 1 without voiding warranty. And grapheneos being one of the best privacy focused ROM only available for pixel and that pretty much every ROM is available on pixel is another reason. I was basically forced into buying a google product as everyone else void warranty on unlocking boot loader or they don't have much of a custom ROM scene.
Another vote for fairphone here, but for reasons others failed to mention: replaceable battery, so even after 2 years, it can feel like new and keep most of its value (to resell if wanted); 5 years of updates + warranty; support for after market roms. Then there's also the fair ethics part of it
For best privacy AND security, Pixel 8 or 8 Pro with GrapheneOS. Nothing else compares. The Pixel 8 series are also the first that support hardware memory tagging, basically making them immune against 70% of all exploits.
I have a Xperia 1.
It has a flagship SoC, but it also has a SD card slot, a headphone jack, no notch or cutout, front firing stereo speakers and a nice blocky look without a massive camera bump.
The downside is software support can be a bit spotty and the cameras are made for manual use, as opposed to being AI-driven point-and-shoot things. That last one could be a positive depending on your preference, though.
But overall? I'm very satisfied, and I went there specifically because I was tired of the ongoing Apple-ification of Samsung in the first place. You may want to consider coming to the dark side and incentivizing Sony to keep making a phone with a feature set, instead of copy-pasting Apple's or Samsung's playbook.
Same boat here, I have the 5 II and I absolutely love it. Great size, the camera is OK on auto but can do wonders in manual mode (depending on your skill).
The lack of software support is a bummer though. I was surprised it's not in LineageOS' official support anymore...
Do you use any custom ROM on your Xperia?
Maybe a fair phone? https://shop.fairphone.com/fairphone-5
Short summary:
- no bloatware
- 5y waranty
- easily Repairable
- Planned to receive 5 android major version upgrades
Addition:
- several unsolved (hardware) issues in the past
- security patches are far too late
- 8 years support
- Using the promoted /e/ results in loss of support (you habe to flash back FairphoneOS). Maybe this has changed as they are sellig phones with preinstalled /e/ by themselves
- Screws in the FP4 where very low in quality
- above-average batterie drain
I have the fp5 and flashed e/os myself. Im very happy with it. You need to flash it back when you want to sent it in (they have the instructions on there own page). Build Quality is nice. Repairs are simple. The price for spareparts is reasonable. And they really try to make a difference here and that is why i support them. Are they perfect? No? But who is? And you need to start from somewhere i think.
- no bloatware
Does it come without GApps? Most people don't need half of those
Google Pixel with GrapheneOS.
I keep seeing this idea everywhere. Buy a Google phone and install another OS.
It is completely absurd to fund the exact adversaries you are running away from, while consuming, without contributing a dime, merely a piece of free software. (It is only a small piece of freedom because none of the hardware is free, and some binary blobs [incl. potential backdoors] will still be present in the alternative OS no matter which one it is.)
This is unsustainable, terrible, damaging advice. Stop giving it.
No bloat? Stay away from Samsung then.
Pixel with GrapheneOS. Only one that will give you the complete control, as well as the privacy (and) security done right. Also the only one that will let you have a fully functional phone, have things like working bank apps, and let you beat the Goog out of the benefits of the play services, while at the same time not allowing them to have privileged access on your phone. They're just normal apps that you are in control of.
I'm not going to affiliate with any conglomerate like Verizon or AT&T or Sprint or T-Mobile etc, I prefer to go rogue somehow,
Yes, you will. Because that's who has the mobile networks. There is no such thing as going rogue. Going with an MVNO isn't avoiding them, that's a mind game. If you can save money going with one cool, but don't kid yourself that you're not on one of the 3 carriers, because you will be.
Google Pixel. I dont know I want to keep my 4a actually as its small, nice and has a headphone jack.
Lots of good advice here, but many might be too extreme. I find such all-or-nothing approach intimidating for people who just started to think about improving their privacy situation.
Let's see... you are angry about bloatware. It can come from two sources - mobile service carrier and phone manufacturer. How to get rid of it?
- Buy only "unlocked" phones. Then the carrier will not be able to push anything to your phone. You will also be free to change the carrier as you wish.
- Buy phones from manufacturers that don't install too much bloatware. Google Pixel has only Google apps, Motorola also is almost vanilla Google. Fairphone is more exotic, but an interesting option. iPhone is OK too if you want Apple ecosystem, but customization is not a thing there.
Now, we are in a privacy focused community and I saw your later comments about Google being an opposite of privacy. I would argue that vanilla Pixel is much better than bloated and locked Samsung already. I see you get recommendations to replace the OS that your new phone might run, and these are valid, but come with significant downsides. There are other ways to improve your privacy stance by changing the way how you use your phone without changing what phone or what OS you run on it.
Just a tip, you can debloat your galaxy without rooting it with adb tools. You can remove any apps you want this way fairly easily.
Not a long term solution, and all the other comments are great options for replacement. Until then, you can remove almost anything you want until you're ready to switch.
Pixel w/GrapheneOS. Insane to do anything else when Privacy and Security is something you want, while also having the ability to have a fully functional phone.
I'm happy with Motorola. I don't buy high end phones though, as I don't care about paying 400 extra for a good camera.
I have a G42
Motorola feels like the best in affordable phones. Plus stock rom experience.