7 ms·

I’m on iPhone thinking of making the switch too. Any privacy tips you recommend for Android?

canofbars 6y ago
The only thing you can do to retain some level of privacy is find a phone with great lineageOS support, install with no gapps, install fdroid as a system app so it can manage updates. You still won't get kernel updates when security issues come around because not even the OEM can update that without convincing all the vendors to update their blobs.
monetus 6y ago
I'm not who you replied to but using privacy focused apps from the F-droid store when you can rather than the play store is a good start.
29083011397778 6y ago
It really depends where you fall between John Doe and Richard Stallman. In no particular order: - Disable GApps. Note that this can absolutely be done without root [1], as I've done so on my BlackBerry KeyOne and a previous LG G6. This has the additional benefit of a dramatically faster UI on nearly any device. - Use F-Droid instead of the Google Play Store when possible. If you've disabled GApps like I have, the Aurora Store can be used to fill in the few apps your employer may require. - Use web versions of apps when possible. mbasic.facebook.com or simply facebook.com is a reasonable alternative to the app, and won't steal you contacts. The former even allows messages to be sent without the app :) - Use a custom ROM. Note that this will require an unlocked bootloader and either a maintainer for your phone, or to build LineageOS for yourself. - Minimize permissions you give apps. Don't get thrown when some apps request Location when you don't think they need though: Google has tied Location to Network Access, meaning you must grant Location Access for most apps to see Bluetooth & WiFi networks (which could reasonably be used as a proxy for your location). - Unless you need it, don't leave Bluetooth on all the time. Retail locations use Bluetooth beacons to ping devices and follow consumers through the store. Bluetooth is reasonably localized, and gives the retailer fascinating data relating to where you went, how long (or if) you lingered in front of junk food, if you had to search for something, where you went first, and possibly payment card information (waiting in line vs walking away after a payment is made at a certain terminal). [1] https://www.xda-developers.com/disable-system-app-bloatware-android/ https://www.xda-developers.com/disable-system-app-bloatware-...
im3w1l 6y ago
It's imo not possible to have perfect privacy on Android and a good experience, you must make a tradeoff: Here is my completely subjective list of steps, from easy to hard: 1. Go to google privacy for your account and disable all tracking. 2. Do not connect your main google account to your phone. 3. Use firefox. 4. Use a 3rd party map app with offline maps. 5. Do not connect any google account to your phone. This locks you out of the app store, so you have to rely on other stores. 6. Use linageos. 7. Do not use gapps or google play services.
therealx 6y ago
You can do all the stuff people say, or if you already use gmail and google search, you can understand they already have a lot of your info, and still use the GApps. Definitely don't give third party apps permissions they dont need, and if you do root, the app that lets you spoof the gps given to apps is wonderful (as well as the one that lets you spoof other info).
kd913 6y ago
Get a raspberry pi and setup pihole with wireguard and dnscrypt-proxy. Get a hostname and basically tunnel your DNS requests to that pihole. Use Firefox and signal instead of say chrome. Disable the assistant and be aware of the privacy controls of your google account. Looking at the DNS requests made so far, it doesn't seem that much worse than an ipad or iphone. I think it depends on what you are also keeping private from who.
- arvindamirtaa 6y ago
  Honestly, this is the right answer. Apple makes sure iOS apps don't ask for anymore permissions than they need. Google doesn't really care. That is the ONLY major difference. If you're mindful of what apps are asking for what permissions, you aren't gaining much from Apple's garden. If you're going 1:1 on the apps that run on both android and iOS, you'll soon see that there's very little difference. One more area where iOS is better is security. Your iPhone is basically a paperweight if it's stolen and the thief doesn't know your password. But that's another story.
  - actuator 6y ago
    What? This is completely false. I don't know what other manufacturers are doing but Google on stock android and on Pixel does mandate asking for permissions. Even Google's own apps ask for them. If your Pixel is stolen you have remote wipe options and newer Pixels contain Titan M chips that disallow tampering to gain access.
- Dahoon 6y ago
  Why would you tunnel your DNS requests when you can just switch DNS on the phone to a filtering one and also use blocklists, IE. with Blokada? Unless you route everything, not only default DNS, through the VPN, any app can just hardcode its own DNS ip and if you route everything through the VPN Blokada will do exactly the same but without an extra hop. Sounds terribly complicated for something that gives less security and privacy. Mind you that is coming from someone who runs 3 Piholes on a homelab.
  - 6y ago
pmontra 6y ago
Logout from every Google service. The only one you must stay logged in into on standard Android is Google Play. Disable and remove every Google or pre-installed app you don't want to use. You won't be able to do it for all of them though. Use something like Blokada to block ads everywhere, including apps. https://blokada.org/index.html https://blokada.org/index.html

The only thing you can do to retain some level of privacy is find a phone with great lineageOS support, install with no gapps, install fdroid as a system app so it can manage updates. You still won't get kernel updates when security issues come around because not even the OEM can update that without convincing all the vendors to update their blobs.

monetus 6y ago

I'm not who you replied to but using privacy focused apps from the F-droid store when you can rather than the play store is a good start.

29083011397778 6y ago

It really depends where you fall between John Doe and Richard Stallman. In no particular order: - Disable GApps. Note that this can absolutely be done without root [1], as I've done so on my BlackBerry KeyOne and a previous LG G6. This has the additional benefit of a dramatically faster UI on nearly any device. - Use F-Droid instead of the Google Play Store when possible. If you've disabled GApps like I have, the Aurora Store can be used to fill in the few apps your employer may require. - Use web versions of apps when possible. mbasic.facebook.com or simply facebook.com is a reasonable alternative to the app, and won't steal you contacts. The former even allows messages to be sent without the app :) - Use a custom ROM. Note that this will require an unlocked bootloader and either a maintainer for your phone, or to build LineageOS for yourself. - Minimize permissions you give apps. Don't get thrown when some apps request Location when you don't think they need though: Google has tied Location to Network Access, meaning you must grant Location Access for most apps to see Bluetooth & WiFi networks (which could reasonably be used as a proxy for your location). - Unless you need it, don't leave Bluetooth on all the time. Retail locations use Bluetooth beacons to ping devices and follow consumers through the store. Bluetooth is reasonably localized, and gives the retailer fascinating data relating to where you went, how long (or if) you lingered in front of junk food, if you had to search for something, where you went first, and possibly payment card information (waiting in line vs walking away after a payment is made at a certain terminal). [1] https://www.xda-developers.com/disable-system-app-bloatware-android/ https://www.xda-developers.com/disable-system-app-bloatware-...

im3w1l 6y ago

It's imo not possible to have perfect privacy on Android and a good experience, you must make a tradeoff: Here is my completely subjective list of steps, from easy to hard: 1. Go to google privacy for your account and disable all tracking. 2. Do not connect your main google account to your phone. 3. Use firefox. 4. Use a 3rd party map app with offline maps. 5. Do not connect any google account to your phone. This locks you out of the app store, so you have to rely on other stores. 6. Use linageos. 7. Do not use gapps or google play services.

therealx 6y ago

You can do all the stuff people say, or if you already use gmail and google search, you can understand they already have a lot of your info, and still use the GApps. Definitely don't give third party apps permissions they dont need, and if you do root, the app that lets you spoof the gps given to apps is wonderful (as well as the one that lets you spoof other info).

kd913 6y ago

Get a raspberry pi and setup pihole with wireguard and dnscrypt-proxy. Get a hostname and basically tunnel your DNS requests to that pihole. Use Firefox and signal instead of say chrome. Disable the assistant and be aware of the privacy controls of your google account. Looking at the DNS requests made so far, it doesn't seem that much worse than an ipad or iphone. I think it depends on what you are also keeping private from who.

arvindamirtaa 6y ago
Honestly, this is the right answer. Apple makes sure iOS apps don't ask for anymore permissions than they need. Google doesn't really care. That is the ONLY major difference. If you're mindful of what apps are asking for what permissions, you aren't gaining much from Apple's garden. If you're going 1:1 on the apps that run on both android and iOS, you'll soon see that there's very little difference. One more area where iOS is better is security. Your iPhone is basically a paperweight if it's stolen and the thief doesn't know your password. But that's another story.
- actuator 6y ago
  What? This is completely false. I don't know what other manufacturers are doing but Google on stock android and on Pixel does mandate asking for permissions. Even Google's own apps ask for them. If your Pixel is stolen you have remote wipe options and newer Pixels contain Titan M chips that disallow tampering to gain access.
Dahoon 6y ago
Why would you tunnel your DNS requests when you can just switch DNS on the phone to a filtering one and also use blocklists, IE. with Blokada? Unless you route everything, not only default DNS, through the VPN, any app can just hardcode its own DNS ip and if you route everything through the VPN Blokada will do exactly the same but without an extra hop. Sounds terribly complicated for something that gives less security and privacy. Mind you that is coming from someone who runs 3 Piholes on a homelab.
- 6y ago

pmontra 6y ago

Logout from every Google service. The only one you must stay logged in into on standard Android is Google Play. Disable and remove every Google or pre-installed app you don't want to use. You won't be able to do it for all of them though. Use something like Blokada to block ads everywhere, including apps. https://blokada.org/index.html https://blokada.org/index.html