Thanks for this, I had some of this completed already but didn’t know about AppOpsX - that piece helped a lot for my peace of mind (as I like my device otherwise quite a bit).

Netguard with HOSTS

I was under the impression you cannot edit the hosts file without root? How do you do this?

Debloat Script

Also obviously a backup is recommended, but didn’t really want to fresh install, I should be fine to run the debloat script without fresh installing correct? Also will this break apps like Signal that check for Google Services and if it doesn’t find it doesn’t rely on them? I had an issue with Signal not sending notifications because of this (Blocking off Google Services with Netguard). I know on systems where Google Services are removed it works fine because it doesn’t detect them, but the debloat script looks like it just disables them correct? So I assume I may run into issues with Signal notifications? I don’t know why Signal can’t just allow us to choose.

Thanks for your post but your Apple section is questionable. Could you please provide sources for your claim that Apple sells data they collect? Also, after that Qualcomm f*ckup, using T1/T2 vulnerability as a reason not to buy Apple device is weird. The only valid arguments are all outlined in the Gist and they are surely concerning. But that’s not nearly enough to say that Apple devices should be avoided.

I think you can replace AppOps with AppOpsX, it also supports adb method and it’s free unlike AppOps that’s freemium

If you don’t use your smartphone often, just buy a PinePhone.

(2/2)

• disable “calendar” for every app except your calendar and email app

• disable “read contacts”, “modify contacts” and “get contacts” for every app except your “Phone”, “Phone Services”, “Phone/Messaging Storage”, contacts and messenger apps

• disable all “send/receive/view messages” permissions for every app except “Phone”, “Phone Services”, “Phone/Messaging Storage”, QKSMS, contacts, dialler and messenger apps

• disable “body sensors” and “recognise physical activity” for every app except games needing gyroscope, or any compass dependent app like camera or bubble leveling app

• disable “camera” for every app except your camera and messenger apps

• disable “record audio” for every app except camera, recorder, dialler and messenger apps

• disable all “Phone” permissions for apps except your SMS app (like QKSMS) and Contacts, Dialler and call recorder apps

• disable “change WiFi state” for every app except file sharing apps (like TrebleShot)

• disable “display over other apps” for any third party app not from F-Droid

• disable “read storage” and “write storage” for apps except file manager, file sharing app and messenger apps

• enable all permissions for “Phone”, “Phone Services” and “Phone/Messaging Storage” system apps, critical for cell radio calling and sending SMS

Step 6: Profit! Now you can plug off phone from computer.

NOTE: Remember to use AppOpsX everytime you install a new app outside of F-Droid store, which is done not too often by people.

#FOR NERDY USERS

• Get App Manager from Izzy’s F-Droid repo (here) to inspect app’s manifest, trackers, activities, receivers, services and even signatures via Exodus Privacy built-in, all without root

• Get Warden from Izzy’s F-Droid repo (here) for checking loggers (rest app is inferior to App Manager)

#HOW TO USE NETGUARD

By default, all apps will be blacklisted from WiFi and mobile data access.

If not, go to Settings via 3 dot menu --> Defaults (white/blacklist) --> Toggle on “Block WiFi”, “Block mobile” and “Block roaming”

Whitelist your web browsers, messengers (WhatsApp, Zoom et al), file sharing apps, download managers, “Aurora Store” app and any game if needs internet and give them WiFi and mobile data access.

Also, whitelist “Downloads” and “Download Manager” as these are system apps that allow web browsers and other apps without built-in downloader to download files. Whitelisting this will keep apps and system stable.

#WHICH PHONE BRANDS ARE GOOD AND BAD? (FACTS)

Now we will need to evaluate what manufacturers are relatively safe, no appeasing, I will be blunt. I will make tier lists to help. I will give explanation for each, so read before jumping with pitchforks.

NOTE: If you have anti-Chinese political allergy, kindly read facts, or choose the other non-Chinese options listed.

Tier 1: Huawei/Honor, Asus, Nokia, Motorola, Sony, LG, FairPhone

Tier 2: Samsung, OnePlus, Oppo, Vivo, Xiaomi, Realme

Tier NOPE NOT AT ALL: Google

FairPhone: Clean software, ethical, recyclable components, good phone but bit extra price for midrange hardware. Status: good.

Huawei: (still no evidence by US government after one year of market protectionism ban, contrary to what Sinophobic US propaganda and condemned joke research papers (refer to this for why), may make you believe, all countries except US, Australia, Japan and UK are allowing them for 5G participation, there is absolutely ZERO EVIDENCE against specifically Huawei (does not count other Chinese companies), earlier ironically audited by UK GCHQ to be safe and on any of their global devices, to date there has been no telemetry found IFF you do NOT use Huawei ID account or Huawei AppGallery store (as instructed above). I have an OpenKirin rooted unlocked Honor 6X, and now a locked P30 Lite to confirm this.

If Huawei’s CEO is a former PLA technician, so do plenty US companies. What does it prove?

NOTE: Real reason for this propaganda ban is USA could not monopolise 5G unlike it did 4G, and so they are playing their cards to put China out of commission. And Huawei did not steal 5G from USA, since USA does not even have a proper 5G vendor yet.

To add, for the rest of world outside China it is better to own a device from a country which has no jurisdiction over them, and you can use their phones without Huawei and Google accounts very safely. BONUS: baseband modem not associated with NSA. Also, good cameras, battery, display and performance in general. Status: good.

Asus, Sony, Motorola: their software is nearly stock, and as such quite beneficial and peace of mind assuring. Status: good.

LG: less stock-y software, still good. Good cameras. display too. Status: good.

Nokia: a bit of skepticism here with them helping spy with nexus with Russia’s MTS and recently found Chinese telemetry as well, but nothing that NetGuard cannot stop by blocking domains via HOSTS from interacting with your device. Status: Potential issues, can be mitigated.

Samsung: Multiple issues with Qihoo 360 on phones with IMEI MAC sent over HTTP, Samsung Pay selling user data with no optout till now, Replicant devs discovering backdoors, Knox hardware blackbox with no idea what microcode it runs, certification from NSA even worrying, lockscreen and notification ads in OneUI, ads on Smart TVs, this all accounts to being quite shady company, but Blokada or NetGuard can mitigate it. Status: avoid for other brands if possible.

Xiaomi: They have quite a bit of telemetry in their MIUI skin, similar to Samsung. Now they have tracking in Incognito Mode in their Browser as well. Status: avoid unless you implement my guide properly.

OnePlus, Oppo, Vivo: They have considerably less telemetry and ads, better than Samsung and Xiaomi. But they will start doing the same thing as Realme which I will mention below soon. Status: potential but passable for now.

Realme: They are implementing ads into their UI, which will soon come to Oppo and Vivo phones too, a bit of an issue. This allows for telemetry and tracking concerns. Status: avoid if possible.

Google: In general an evil megacorp, Titan M security chip is self-claimed to be great on Pixels, but there is no way to verify if the microcode it contains is the same as that open sourced by Google. Having faith in Google’s promise of their proprietary closed source chip being clean is like having faith in cyanide not killing a person. Moreover, they are known as:

• NSA partner and collecting data and spy on users in googolplex capacity

• AI used by US military for drone bombing in foreign countries based on metadata Google collects on smartphones

• use dark patterns in their software to make users accept their TOS to spy

• repeated lies about how their data collection works claiming anonymity

• forcing users to use their Play Services which is spyware and scareware

• monopolising the web and internet via AMP

• use of non standard web browser libraries and known attempts to cripple lone standing ethical competitors like Firefox and Gecko web engine (now with Microsoft making their default Edge Chromium-based too)

TL;DR there is no summary, privacy is an indepth topic and you must take a couple of hours to go through this simple guide, as long as it looks it should clear all your concerns with smartphone privacy.

This is the best you can do without rooting or modding a phone, and it is working for me since almost a year now, personally tested and verified on my locked P30 Lite.

I have a history of rooting and modding phones, one being an Honor 6X before Huawei disabled unlocking policy, one being a Xiaomi and one being a Lenovo before that. Also, one Samsung Galaxy S2 long time ago.

Credit to /u/w1nst0n for the Universal Android Debloater (authorised me to use his tool). Hope this guide serves as a great tool for any privacy seeker.