How can you make stock Android as private as possible?

[unicornbro@sh.itjust.works]

I know that stock Android itself is spyware.

What tips about setting up my stock Android phone would you give me?
It's not factory unlocked so I'm sticking with Google Android.

Things I've done:

• Stopped and disabled all apps that I don't use or need.
• Replaced all apps that I can with FOSS alternatives from github using Obtainium.
• Not installed things that I can just check on my laptop like email.

Is there anything else that I can do?
Thanks in advance

Edit
I've also:

• Changed my DNS to Mullvad DNS
• Restricted app permissions to only what they need
• Not signed into the phone. I don't even have Gmail account.

[peffse@lemmy.world]

So one of the gotchas about stopped/disabled apps is that other apps can still call and launch them. I frequently saw my apps pop back up even after being disabled, since I used SuperFreezZ to monitor them. https://f-droid.org/packages/superfreeze.tool.android/

The alternative to that would be an ADB disable. IIRC it takes the app away from userspace completely. It doesn't touch the system-level though, so a factory reset will bring it back.

If you can't handle setting up ADB and it's hoops, there is an app combo that can set up a bridge and run the ADB disable for you: https://f-droid.org/en/packages/io.github.samolego.canta/

[crankyrebel@lemmy.dbzer0.com]

I assume you are using F-droid app manager, and also added IzzyonDroid repo to it? There you can get a lot of apps, like firewalls to block apps that call home when you don't really use them. Replace most of your apps with open source alternatives from F-droid. Get an email hosting alternative that isn't one of the big (spy, data mining) companies. Use decentralized privacy focused social media options. What type of phone manufacturer do you use and is it unlocked? You could use an android privacy rom like CalyxOS, that is what I use, completely de-googled, uses MicroG instead of Google Play services. A VPN would be my last option to add, especially when connecting to outside wifi.

[asudox@lemmy.asudox.dev]

With Shizuku and Canta, you can remove the spying system apps. You can brick your phone though, so do be careful. If you want to play it safe, use the recommended list in Canta. These should be safe to remove.

[merde@sh.itjust.works]

netGuard ☞ https://f-droid.org/packages/eu.faircode.netguard

[slackness@lemmy.ml]

Depends on what you mean by stock android. Google's phones do not come with stock android.

[deathbybigsad@sh.itjust.works]

Rethink DNS is both a firewall app, and you can run a VPN at the same time using a wireguard configuration.

I use a VPN system wide, and for some apps like Fennec or a Torrent app (yes I torrent on my phone lol), I use a different wireguard config for each one of these apps. For the systemwide VPN, its using a server in my country, for individual apps, it goes to switzerland or iceland (So the IP used to check for system updates isn't correlated to the IP used for everyday browsing, watch youtube videos, or torrenting). I block everything from internet access unless it needs internet to function, like a phone app for example (for VoLTE). Enable "block connections without VPN".

Mullvad has the cheapest VPN at €5 Euro per month, and ProtonVPN have some free servers, but free servers have slower speeds.

[squaresinger@lemmy.world]

And enable network filtering and set a good adblock hosts file.

[vsts@lemmy.world]

https://thenewoil.org/en/guides/most-important/mobile-settings/