I’ve been looking into moving towards a more privacy friendly OS on my phones; I’ve been deGoogling my phones to the maximum extension I can manage, deactivating stock apps and putting in as much FOSS possible.
But what other options are there out there?
I don’t want to go full out into Linux Phone territory, as I am not tech savvy enough to maintain a phone on that line, and I have two bank and a carrier applications I would like to keep using.
As I write this, Murena and their /e/ OS seems to be a good option, as they have some accessibly priced equipments and the OS itself seems to be a clean(er) Android.
The main options right now (that are based on Android) are LineageOS, iodeOS, e/OS, and GrapheneOS. I believe CalyxOS wasn’t maintained for a quite a while for various reasons (nothing controversial, just people moving on to do other things in life), but from their blogs it looks like they are coming back soon, which is neat!
As for the currently available options, LineageOS will have the best device support, but is close to stock Android, just without the Google bits (+ optional microG). iodeOS (pronounced something like “eeyoda”) adds additional privacy tweaks to LineageOS and was created by French developers, and also has optional parental controls if you have a kid(s). e/OS, also based on Lineage, has an iOS-like launcher and is tied to Murena services, so if you enjoy those, it’s a good option.
GrapheneOS is not based on LineageOS, and is only supported on Pixels currently due to the developer’s insistence that other devices do not have the same level of hardware security. If you have a Pixel / they are available to you, it’s a solid option. OOTB it’s very barebones with few apps preinstalled, and by default it comes with Vanadium (Chromium-based browser) and Accrescent (alternative app store that is currently in alpha, so very early stages) and not much else besides your usual camera, settings, etc. The developer is quite paranoid and regularly speaks out against other open-source projects, which I would think is against the open-source ethos, but if you don’t mind that (at least they’re probably not some extremist who wants to kill babies), if you prefer something super minimal, and have access to a Pixel, GrapheneOS is a solid choice.
If you phone isn’t supported by these, or if none suit your use case, avoiding the use of proprietary and privacy invasive apps is the best option. If you don’t need social media for work (Instagram, Facebook, Snapchat, etc.), remove them, or replace with Fediverse alternatives. Use a custom launcher, like Kvaesitso or Lawnchair. Use a FOSS keyboard, like Heliboard (and Whisper for voice input). Use a non-Google DNS, like NextDNS, PiHole, etc. to block trackers and other unwanted network requests. If possible, get friends and family to switch to Signal (for messaging, WhatsApp-like) and Matrix (for larger groups, Discord-like). Aim to install all apps with either F-Droid, Obtainium (git repos), or other alternative app stores.
Great overview! One thing to add here is this amazing comparison of the afrorementioned options: https://eylenburg.github.io/android_comparison.htm
Regarding GrapheneOS, there are a few things that distinguish it from the rest:
- the devs are really paranoid in the good way: it’s to receive security updates even before official pixel OS, a lot of OS level security hardening, a lot of features developed specifically to reduce attack surface (e.g. ability to completely disable USB, periodical reboots etc)
- it supports some exclusive privacy features (e.g. full per-app network kill-switch, contacts & storage scopes, location rerouting for play services etc) aimed to protect your data from crapware you might be forced to install
- it supports official play store and play services but in the most restricted way possible — they’ve developed a shim that allows to run it without any privileges and any permissions; you can also install it only under a completely separate user to fully separate it from your data
- in terms of being barebones, it is like this out of the box but you can install absolutely anything on it (unless it depends on “strict” play integrity protection)
the devs are really paranoid in the good way
I did not say it was entirely bad, but I would say that they have definitely rubbed some people the wrong way when it comes to how they treat other projects
it supports some exclusive privacy features
That is true! Some of those are pretty cool actually!
in terms of being barebones, it is like this out of the box but you can install absolutely anything on it
Good point to mention! I did mean OOTB, sorry if that wasn’t clear. I think that’s a good thing, less bloat and a more curated software experience, but it’s not for everyone
No worries @sbeak, I just wanted to add a bit more to your comment for the people who don’t have experience with GrapheneOS or other FOSS ROMs. Also, now CalyxOS is back which it great :)
Here in Sweden, bank issued ID on the phone is pretty much required for everything. You can’t function in society without it. It isn’t tied to Google or Apple, but you must have a smartphone that supports it (ie. iOS or Android).
I’m curious to know whether you need to have an official Android phone (i.e. NOT a custom ROM, something validated by Google), or if the Google Play services are enough. In France there is a government ID application that no one uses, but it’s still usable on GrapheneOS.
I think you can get it to work on custom ROMs, but I’ve also heard about people having trouble with it. A colleague recently bought a Jolla phone…if he can get everything to work, maybe I’ll switch as well in the future.
Bank issued ID? Can you explain that a bit?
We have a digital ID called BankID that is standardized by the banks. All banks can issue it, and it can be used for mostly anything online that requires real authentication, like paying with your card or logging in to manage your taxes etc.
That is a lot of trust put upon banks.
We have something similar in my country but it is the State that issues it; it serves as an authenticator for State services and connected entities.
For online payments and the sort, there are several systems in place. One very useful is issuing single-use, prepaid, cards for online use.
Why do banking apps keep coming up with degoogling? Do you have to bank on the fly and are you not able to log into their website via a browser? I’m legitimately curious.
From what I read on the internet, it’s very random. Some banks (percentage unknown) only allow access through applications (e.g. with a Google security thing NOT available on custom ROMs), or IRL but it’s inconvenient. It depends on the bank and the country.
I happen to have accounts with 2 French banks that allow GrapheneOS without issue, and still have usable web sites. One bank is a brick-and-mortar “credit union” as Americans call it, the other bank is an online bank with only phone call support.
I don’t use my phone to pay though because it would require me to use Google Wallet, but I can still use Wero (the new European thingy), or my debit card most of the time.
But if you get another French bank, or you are in another country, you may be less lucky than me.
The banking sector is changing for more of a retail commerce platform and most of banks are giving more options within apps.
For the record Fuck the banks i am just answering you why people prefer the apps.
More people carry a smartphone nowadays than those that have a computer at home. Banks are not stupid; they cater to the clientele and that clientele is shifting towards apps at an accelerated pace. There are a couple of banks operating in my country that don’t even have any other access but their app: no website, no physical locations.
I would leave my bank the moment they stopped supporting browser access. I’m not relying on an app to handle banking.
From what I’ve gathered, needing banking apps to participate in society is growing more common in Europe than the US, but i could be wrong there.
In France it still depends on the bank. I can access 3 different banks on the web without an application, but others can be blocked. It sucks.
