I’ve been looking into moving towards a more privacy friendly OS on my phones; I’ve been deGoogling my phones to the maximum extension I can manage, deactivating stock apps and putting in as much FOSS possible.
But what other options are there out there?
I don’t want to go full out into Linux Phone territory, as I am not tech savvy enough to maintain a phone on that line, and I have two bank and a carrier applications I would like to keep using.
As I write this, Murena and their /e/ OS seems to be a good option, as they have some accessibly priced equipments and the OS itself seems to be a clean(er) Android.
The main options right now (that are based on Android) are LineageOS, iodeOS, e/OS, and GrapheneOS. I believe CalyxOS wasn’t maintained for a quite a while for various reasons (nothing controversial, just people moving on to do other things in life), but from their blogs it looks like they are coming back soon, which is neat!
As for the currently available options, LineageOS will have the best device support, but is close to stock Android, just without the Google bits (+ optional microG). iodeOS (pronounced something like “eeyoda”) adds additional privacy tweaks to LineageOS and was created by French developers, and also has optional parental controls if you have a kid(s). e/OS, also based on Lineage, has an iOS-like launcher and is tied to Murena services, so if you enjoy those, it’s a good option.
GrapheneOS is not based on LineageOS, and is only supported on Pixels currently due to the developer’s insistence that other devices do not have the same level of hardware security. If you have a Pixel / they are available to you, it’s a solid option. OOTB it’s very barebones with few apps preinstalled, and by default it comes with Vanadium (Chromium-based browser) and Accrescent (alternative app store that is currently in alpha, so very early stages) and not much else besides your usual camera, settings, etc. The developer is quite paranoid and regularly speaks out against other open-source projects, which I would think is against the open-source ethos, but if you don’t mind that (at least they’re probably not some extremist who wants to kill babies), if you prefer something super minimal, and have access to a Pixel, GrapheneOS is a solid choice.
If you phone isn’t supported by these, or if none suit your use case, avoiding the use of proprietary and privacy invasive apps is the best option. If you don’t need social media for work (Instagram, Facebook, Snapchat, etc.), remove them, or replace with Fediverse alternatives. Use a custom launcher, like Kvaesitso or Lawnchair. Use a FOSS keyboard, like Heliboard (and Whisper for voice input). Use a non-Google DNS, like NextDNS, PiHole, etc. to block trackers and other unwanted network requests. If possible, get friends and family to switch to Signal (for messaging, WhatsApp-like) and Matrix (for larger groups, Discord-like). Aim to install all apps with either F-Droid, Obtainium (git repos), or other alternative app stores.
Murena OS seems at the moment the best choice for what I intend. I may lose my banking apps but I can live with that,
Great overview! One thing to add here is this amazing comparison of the afrorementioned options: https://eylenburg.github.io/android_comparison.htm
Regarding GrapheneOS, there are a few things that distinguish it from the rest:
- the devs are really paranoid in the good way: it’s to receive security updates even before official pixel OS, a lot of OS level security hardening, a lot of features developed specifically to reduce attack surface (e.g. ability to completely disable USB, periodical reboots etc)
- it supports some exclusive privacy features (e.g. full per-app network kill-switch, contacts & storage scopes, location rerouting for play services etc) aimed to protect your data from crapware you might be forced to install
- it supports official play store and play services but in the most restricted way possible — they’ve developed a shim that allows to run it without any privileges and any permissions; you can also install it only under a completely separate user to fully separate it from your data
- in terms of being barebones, it is like this out of the box but you can install absolutely anything on it (unless it depends on “strict” play integrity protection)
the devs are really paranoid in the good way
I did not say it was entirely bad, but I would say that they have definitely rubbed some people the wrong way when it comes to how they treat other projects
it supports some exclusive privacy features
That is true! Some of those are pretty cool actually!
in terms of being barebones, it is like this out of the box but you can install absolutely anything on it
Good point to mention! I did mean OOTB, sorry if that wasn’t clear. I think that’s a good thing, less bloat and a more curated software experience, but it’s not for everyone
Don’t shame baby killers. We are humans just as you!
Here in Sweden, bank issued ID on the phone is pretty much required for everything. You can’t function in society without it. It isn’t tied to Google or Apple, but you must have a smartphone that supports it (ie. iOS or Android).
Bank issued ID? Can you explain that a bit?
So you can’t just carry around a debit or credit card for physical purchases?
Why do banking apps keep coming up with degoogling? Do you have to bank on the fly and are you not able to log into their website via a browser? I’m legitimately curious.
Not OP, but personally a banking app along with another ID app where I live are basically needed to verify any online purchases, plus using a banking app to pay for stuff with tap to pay is a lot more convenient than carrying a wallet/cards :3
I have an integrated payment system that works directly from my banking apps; without those apps, I’m out of the system, as it depends on push notifications to accept and allow transfers, payments, etc. Another ugly thing happening is the slow but steady shift of banks towards app-only remote access. My day to day bank is somewhat a middle of the ground but they’ve invested heavily into their app, while ignoring their website, that stopped somewhere around 2015. It’s clunky, hard to use and even lacks some options that are only available on the app or at a walk-in location but those are but a few in the entire country. There are already two banks operating in my country that are app only for access.
Another example is my carrier. Their entire support is done through the app. No email, no phone, nothing. Unless I have their app, if I have an issue, I’m locked out. I can switch carrier and avoid this problem but that implies getting worst coverage.
And I wasn’t originally considering it but my government does have an app that concentrates a number of direct services and allows for digital copies of official documents to be available.
Have you tried microG? It’s a foss implementation of play services that supports firebase notifications.
I’ve tried and somehow it fails to install.
Digital payments require a digital payments app which require google play services. I cannot function without it. My transactions are 95% digital. I do not do deal in cash. Its much simpler and easier to scan and pay rather than count change and deal with it.
Do you have access to or have you considered a credit/debit card? It’s an easy way to no longer require google play services, it fits in nearly anything, and is just as quick as the phone with tap.
Most shops in my region support Scan and Pay. Credit card and debit cards are a luxury. No shopkeeper is paying for the added transaction fees and the cost of card machine.
Scan & pay is much cheaper. There are also no transaction fees for online payments. I’m talking about UPI payments. That’s the best payments system I know. Especially, for small transactions.
The banking sector is changing for more of a retail commerce platform and most of banks are giving more options within apps.
For the record Fuck the banks i am just answering you why people prefer the apps.
I suppose I’ve been lucky. I use my phone for calls, texts, and browsing the web. I’ve never had to use it for banking as I handle that at home on a pc for well over a decade now.
More people carry a smartphone nowadays than those that have a computer at home. Banks are not stupid; they cater to the clientele and that clientele is shifting towards apps at an accelerated pace. There are a couple of banks operating in my country that don’t even have any other access but their app: no website, no physical locations.
I would leave my bank the moment they stopped supporting browser access. I’m not relying on an app to handle banking.
Very well, reasonable, but why exactly?
From what I’ve gathered, needing banking apps to participate in society is growing more common in Europe than the US, but i could be wrong there.
Playing devils advocate here as my phone is somewhat hardened and mostly degoogled already. My bank let’s you cash checks via the app, but not the website. I am willing to go feed them into the ATM by hand, but not everyone lives so close to the bank. It is an issue, but it shouldn’t be dealbreaker because privacy is worth far more. That said, ignoring the issue will only make us lose out on potential converts from spyware-android to hardened-android and mobile Linux.
