Is it necessary to have a pixel smartphone for privacy? I have a phone that is easy to unlock, but I can’t afford to brick it. I can’t afford to buy another at the moment either. What are my options for running another OS, if any?
No, GrapheneOS is just the absolute maximum possible security/privacy in an operating system. You can still have privacy on most operating systems. I’d say stick with the stock operating system for now but go through the settings, turn off everything you’re not comfortable with. Not sure what your threat model is so it’s hard to give advice, but you can use an E2EE messenger like Signal for private messaging etc.
1 Like
you second best option is an iPhone pretty much, otherwise well, there’s not much you really can do because you;re sacrificing either security or privacy. Or both.
It depends on your threat model. GrapheneOS and the Google Pixel are leaps beyond the next best thing in my opinion, but at the end of they day they’re still just smartphones so for some threat models even that won’t be enough.
It sounds like you don’t really have a choice then. If I were in your shoes I’d follow The New Oil’s Android settings guide and try to stick to as many Privacy Guides recommended software/services as you can afford. Most of it is free.
Your phone might be compatible with CalyxOS or LineageOS, however neither of these are recommended by Privacy Guides as (depending on the OS and device) they might weaken Android security or may be late in pushing new updates.
The only time I’d recommend using them is if your device is EOL and no longer receiving security updates. The trade-off of potentially weakened security features for a patched OS and less data collection is worth it in my opinion. Keep in mind your device firmware and drivers will probably remain outdated so it’s best to get a new phone (preferrably a Pixel running GrapheneOS) once you can afford one.
Just play with the cards you’re dealt. If you are on anything but a Pixel, you should be using your stock OS unless it doesn’t receive updates anymore.
5 Likes
You can change settings but that assumes that the OS/Device manufacturer actually respects your set preference. This varies from manufacturer to manufacturer as some are better than others.
Best you can do is stay up to date and make sure you are still getting updates.
See your relevant Settings page in Android:
Under About phone
- Under Android version
- Android version
- says 15 (currently the most recent release)
- Android Security update
- Also shows a date. Currently it says March 5, 2025 for me.
- Baseband version
- I see certain numbers that I presume to include dates due to some having a cluster of 6 digit number, some starting with 24xxxx and some with 25xxxx.
- Android version
- Under Build number
- (for Graphene at least) Shows yyyymmddnn format so you know at least what month and year your OS is build against.
If the above information seems grossly out of date, especially the Android Security update. Then consider getting a new phone. In the future when deciding what model to purchase, take into account how long a device will be supported.
If your phone is already outdated and cannot purchase a new phone or afraid to flash its ROM in fear of bricking, consider uninstalling all the non-critical and unused apps (games, rarely used utilities, exercise/health apps, etc) to minimize exposure. Be mindful of links and websites that isnt familiar to you.
Finally, consider replacing all your apps with the ones recommended in the Recommendations page.
1 Like
I Also Recommend You to never buy A Pixel Device from Sketchy Sellers And only Buy From The Official Website Or A Trusted 3rd Party Vendor
1 Like
I recently acquired an obscure carrier provided phone that is not unlockable and doesn’t support OEM unlocking (AT&T V340U Fusion Z)
You can get pretty far by using Android Device Bridge (ADB) to uninstall bloatware and Google Play Services and GSF.
I use a script to go through all the packages to uninstall. It looks like this:
#!/bin/zsh
# This script uninstalls non-essential apps from the AT&T Fusion Z device using ADB.
# It is tailored for a Wi-Fi-only, FOSS-focused setup with alternative TTS (Sherpa TTS) and NFC apps (e.g., NFC Tools).
# SIM/carrier apps are removed since no SIM will be used. Qualcomm location/time apps are kept for GPS and time sync.
# Run with ADB connected: `./script_name.zsh`
# IMPORTANT: Review the list below. Comment out any app you want to keep by adding '#' before its line.
# List of apps to uninstall
packages=(
"com.att.deviceunlock" # AT&T Device Unlock
"com.att.dh" # AT&T Device Health
"com.att.iqi" # AT&T Insight Quality Intelligence
"com.vinsmart.android.dialer.att" # AT&T Dialer
"com.vinsmart.camera" # Vsmart Camera
"com.vinsmart.rcs.messaging" # RCS Messaging
"com.vinsmart.wificalling" # Wi-Fi Calling
"com.vsmart.fotaagent" # Firmware Update Agent
"com.vsmart.techmode" # Technician Mode
"com.vsm.entitlement" # Entitlement Service
"com.vsm.fcmentitlement" # FCM Entitlement
"com.vinsmart.android.tetherentitlementservice" # Tethering Entitlement
"com.google.android.youtube" # YouTube
"com.google.android.apps.maps" # Google Maps
"com.google.android.apps.docs" # Google Docs
"com.google.android.apps.tachyon" # Google Duo
"com.google.android.apps.youtube.music" # YouTube Music
"com.google.android.calendar" # Google Calendar
"com.google.android.apps.photosgo" # Google Photos (lite)
"com.google.android.apps.assistant" # Google Assistant
"com.google.android.apps.wellbeing" # Digital Wellbeing
"com.google.android.apps.nbu.files" # Google Files
"com.google.android.videos" # Google TV
"com.google.android.apps.searchlite" # Google Search (lite)
"com.google.android.calculator" # Google Calculator
"com.google.android.gm" # Gmail
"com.vsmart.soundrecorder"
"com.android.chrome" # Google Chrome
"com.google.android.deskclock" # Google Clock
"com.facebook.lite" # Facebook Lite
"com.facebook.system" # Facebook System
"com.summit.nexos.sdk.app.service" # Third-party service
"com.android.stk" # SIM Toolkit
"com.android.wallpaper" # Wallpaper App
"com.android.dreams.basic" # Screensaver
"com.android.musicfx" # Music Effects
"com.android.bips" # Built-in Print Service
# "com.android.htmlviewer" # HTML Viewer
"com.android.egg" # Android Easter Egg
"com.android.hotspot2" # Wi-Fi Passpoint
# "com.android.mtp" # MTP Host (USB file transfers)
# "com.android.vpndialogs" # VPN Dialogs actuall need this one!
# Google Apps (proprietary, not needed with F-Droid alternatives)
# "com.google.android.webview" # Android System WebView (replace with Bromite if needed)
"com.google.android.tts" # Google Text-to-Speech (replaced with Sherpa TTS, safe with alternative engine)
"com.google.android.inputmethod.latin" # Gboard (replace with OpenBoard)
"com.google.android.apps.restore" # Google Restore (not needed without Google backups)
"com.google.android.configupdater" # Google Configuration Updater (Google ecosystem)
"com.google.android.onetimeinitializer" # Google One-Time Init (runs during setup)
"com.google.android.partnersetup" # Google Partner Setup (integrates Google apps)
"com.google.android.syncadapters.contacts" # Google Contacts Sync (not needed without Google account)
"com.google.android.tag" # Google NFC Tags (replaced with F-Droid NFC apps, not a core NFC dependency)
# "com.google.android.gmsintegration" # Google Play Services Integration
# "com.google.android.overlay.gmsconfig" # Google Play Services Config Overlay
# "com.google.android.overlay.gmsgoconfig" # Google GMS Config Overlay
"com.google.android.feedback" # Google Feedback (crash reporting)
"com.google.android.printservice.recommendation" # Google Print Service (not needed if not printing)
"com.google.android.apps.speechservices" # Google Speech Services
# "com.google.android.gms" # Google Play Services (core Google framework) these three
# "com.google.android.gsf" # Google Services Framework
"com.google.android.ims" # Google IMS (IP Multimedia Subsystem, telephony-related)
"com.google.android.setupwizard" # Google Setup Wizard (safe after initial setup)
"com.google.android.marvin.talkback" # Google TalkBack (replace with eSpeak or other accessibility)
# "com.google.android.ext.services" # Google Extended Services
# "com.google.android.ext.shared" # Google Shared Library
# "com.google.android.modulemetadata" # Google Module Metadata
# "com.google.android.packageinstaller" # Google Package Installer (F-Droid installer works) found out the hard way that this is necessary!
# "com.android.vending" # Google Play Store (using F-Droid instead)
# Carrier and Manufacturer Apps (not needed for Wi-Fi-only use)
"com.vinsmart.tool" # Vsmart utility tool (diagnostic, not needed post-setup)
"com.vinsmart.basicfuntest" # Vsmart function test app (factory testing)
"com.vinsmart.nonframeworklocationattribution" # Vsmart location service (proprietary, redundant with Qualcomm)
"com.qualcomm.qti.cne" # Qualcomm Connectivity Engine (cellular network optimization)
"com.qualcomm.qti.uim" # Qualcomm User Identity Module (SIM-related)
"com.qualcomm.qti.simsettings" # Qualcomm SIM Settings (SIM management)
"com.qualcomm.qti.networksetting" # Qualcomm Network Settings (cellular network options)
"com.qualcomm.qti.callfeaturessetting" # Qualcomm Call Features Settings (call options)
"com.qualcomm.qti.seccamservice" # Qualcomm Secure Camera Service (optional security feature)
"com.trustonic.simdetection" # Trustonic SIM Detection (secure SIM features)
# "com.trustonic.teeservice" # Trustonic TEE Service (Trusted Execution Environment)
"com.qti.confuridialer" # Qualcomm Configurable Dialer (telephony)
"com.qti.dpmserviceapp" # Qualcomm DPM Service (device performance, optional)
"com.qti.qualcomm.datastatusnotification" # Qualcomm Data Status (cellular data notifications)
"com.qualcomm.qti.telephonyservice" # Qualcomm Telephony Service (telephony features)
"com.qualcomm.qcrilmsgtunnel" # Qualcomm Radio Interface Layer (telephony)
"com.qualcomm.embms" # Qualcomm eMBMS (cellular broadcast service)
"com.dti.cricket" # Cricket (AT&T carrier app)
"com.android.omadm.service" # OMA Device Management (carrier provisioning)
# System Apps with F-Droid Alternatives
"com.android.contacts" # Stock Contacts (replace with Simple Contacts)
"com.android.providers.calendar" # Calendar Provider (replace with Simple Calendar)
# "com.android.documentsui" # Files App (replace with Amaze File Manager)
# "com.android.providers.downloads.ui" # Downloads App (redundant with file manager)
# Miscellaneous Non-Essential Apps
# "com.android.wallpapercropper" # Wallpaper Cropper (rarely used)
# "com.android.theme.color.cinnamon" # Theme pack (remove unless used)
# "com.android.theme.icon_pack.rounded.systemui" # Icon pack (remove unless used)
# "com.android.protips" # Pro Tips (tutorial)
"com.android.simappdialog" # SIM App Dialog (SIM-related)
# "com.android.emergency" # Emergency Info App (optional without SIM)
# "com.android.storagemanager" # Storage Manager (manual management is fine)
"com.android.printspooler" # Print Spooler (remove if not printing)
# "com.android.cellbroadcastreceiver" # Cell Broadcast (emergency alerts, optional without SIM)
)
# Uninstall each app in the list
for pkg in "${packages[@]}"; do
echo "Uninstalling $pkg"
adb shell pm uninstall -k --user 0 "$pkg" 2>/dev/null || echo " -> $pkg already uninstalled or not present"
done
echo "Uninstallation complete."
echo "To reinstall an app, use: adb shell cmd package install-existing <package_name>"
You can generate a list of all the installed packages with $ adb shell pm list packages -f
I use PCAPdroid to inspect network requests the device is making to see what needs to be further locked down.
I also set my DNS provider to NextDNS so that I can manually go in and block requests to the domains I don’t want.
This won’t remove all the spyware nonsense and you can never really be certain, but this goes pretty far towards having a similar experience to Graphene OS.
I don’t use this phone for anything sensitive, just an extra phone for experiments with other apps.
1 Like