It really depends where you fall between John Doe and Richard Stallman. In no particular order: - Disable GApps. Note that this can absolutely be done without

It really depends where you fall between John Doe and Richard Stallman. In no particular order: - Disable GApps. Note that this can absolutely be done without root [1], as I've done so on my BlackBerry KeyOne and a previous LG G6. This has the additional benefit of a dramatically faster UI on nearly any device. - Use F-Droid instead of the Google Play Store when possible. If you've disabled GApps like I have, the Aurora Store can be used to fill in the few apps your employer may require. - Use web versions of apps when possible. mbasic.facebook.com or simply facebook.com is a reasonable alternative to the app, and won't steal you contacts. The former even allows messages to be sent without the app :) - Use a custom ROM. Note that this will require an unlocked bootloader and either a maintainer for your phone, or to build LineageOS for yourself. - Minimize permissions you give apps. Don't get thrown when some apps request Location when you don't think they need though: Google has tied Location to Network Access, meaning you must grant Location Access for most apps to see Bluetooth & WiFi networks (which could reasonably be used as a proxy for your location). - Unless you need it, don't leave Bluetooth on all the time. Retail locations use Bluetooth beacons to ping devices and follow consumers through the store. Bluetooth is reasonably localized, and gives the retailer fascinating data relating to where you went, how long (or if) you lingered in front of junk food, if you had to search for something, where you went first, and possibly payment card information (waiting in line vs walking away after a payment is made at a certain terminal). [1] https://www.xda-developers.com/disable-system-app-bloatware-android/ https://www.xda-developers.com/disable-system-app-bloatware-...