US Mobile appears to be a popular American MVNO for people in the privacy space, at least based off GrapheneOS forums.
I’m interested to hear your thoughts on their new security features and how it currently compares to other mobile providers. Do you see any glaring privacy or security weaknesses or issues with their announced security features?
Passkey support puts them pretty well beyond a lot of other carriers. It doesn’t seem like they let you sign up with a passkey initially though, and they don’t seem to let you remove your password after the fact with in my view removes a lot of the security benefits of passkeys. So definitely an area they could improve.
They ask for a lot of data on signup like email, first and last name, and even phone number strangely, but you can leave the phone number field blank. They do bug you about adding a phone number however. They don’t seem to ask for your SSN which is nice.
They don’t seem to support Apple’s Limit cellular tracking feature which would be nice to see, and there’s no mention of RCS E2EE support either which would be a huge security benefit.
Don’t know if they could comment on Cape or Phreeli, it would be interesting to see if they think anything “private” carriers like them are doing that they should be doing to improve security.
I can confirm that RCS is well-supported on US Mobile, at least using their Warp (Verizon) network. For awhile, it was actually the go-to recommendation on GrapheneOS forums for painless RCS support. With the new ICC Authentication with device identifiers toggle on GrapheneOS, their Light Speed (T-Mobile) and Dark Sky (AT&T) networks should work as well.
It’s a good point about two factor, a shocking number of MVNOs don’t offer it. I am currently on Tello which does offer it plus I think is considered also relatively more security/privacy friendly among MVNOs