I’m frustrated. I’m a long time fan of Motorola. Their phones have been pretty simple and easy to remove junk apps. Recently I got an update that forced perplexity on my phone.
Do you need root? It’s a big security risk, for multiple reasons.
You can always just get a used pixel (no further money to Google), and install a custom ROM that allows your bootloader to relock after installation. I personally prefer Graphene for this, but I believe Lineage also allows you to do so. They both have no bloat from the start, and GOS has sandboxed Google Play and Lineage has the ability to use microG iirc.
GOS can be installed via chromium based browsers, even from another phone. Security wise, there’s nothing more secure at the moment.
Why are pixels so popular for this?
Pixels are (currently) the only phones that allow for all of the following at once:
- Proper verified boot
- Bootloader unlocking (this is most important for any custom ROM installation, regardless of ROM)
- Hardware memory tagging
- Full hardware isolation
- Hardware key attestation
- Ability to disable USB data (and also USB entirely) at the hardware level
- Everything else on this list
In short, it’s simply because Pixel currently has the most hardware level security features of any Android phone (on top of bootloader unlocking), for now. The Graphene team is allegedly in talks with an OEM to produce a phone specifically designed for it, which may be just as or even more secure. Time will tell.
I feel the need to mention that I’m not trying to shill for Graphene and especially not Google. Depending on your threat model and goal, Lineage or similar might be just fine for you. I just don’t think there’s anything more secure than GOS at the moment, and if that is important to you, along with minimizing bloat, it’s a great choice. I do highly recommend avoiding root and instead just get something that you can unlock the bootloader for, and then install a degoogled ROM. Just make sure you don’t accidentally buy a permanently locked phone, make sure it says unlocked somewhere in the listing.
Great write up! Thank you!!
I’m sure its in the link the other comment provided, but I’ll call out that you not only can unlock your bootloader to install your OS but you can relock it so nothing can install anything afterwards.
So if your phone is ever not in your possession you can be sure that nobody installed anything. Also keeps your phone safe from malware (at root level).
Recently I got an update that forced perplexity on my phone.
Fuck me, that’s infuriating.
What country are you in? Murena sells Fairphones in the US.
Other than that, I know this isn’t what you asked for but GrapheneOS can be installed from the browser on your computer…
USA
There ya go, Murena is probably your best bet.
Looks like they have a few devices, actually
rooted
Root is always a security risk, you really should not. (GrapheneOS comment (on Reddit) about rooting.)
out the box
None, probably. Refer to Bootloader Unlock Wall of Shame instead to check which companies do not restrict bootloader unlocking. See here for a list of devices where the bootloader can be locked with custom AVB Keys.
_
deleted by creator
Not OP, but Neobackup (full app backup) and Hail (ability to “freeze” - stop apps until you explicitly run them again) are my two big use cases for root
Similar to the full app backup use-case mentioned in another comment, I regularly use root to (through adb shell) make a personal backup of my owned kindle books and keys which I can then use to convert them to DRM-free epub and read those books in non Amazon approved apps. The encrypted books are in shared storage but the key to decrypt them is in an app-private database. I also occasionally backup my own apk/obb files.
A “security model” designed around the idea that users should never be able to have any kind of access, not even read-only, to the data that app developers store on their owned device if the developer doesn’t want them to is one that is fundamentally incompatible with computing freedom.
I keep a secondary device with rooted Lineage at home for the few apps I want root access to, instead of rooting my daily driver, but I always feel like it would be reassuring to have the ability to make proper backups from my main phone.
That’s what OnePlus, Nothing, and FairPhone are supposed to be about.
For privacy, I like my iPhone, but I can’t really recommend them anymore. Even with “Apple Intelligence” the keyboard is hilariously terrible. It gets a few things right and I’m wondering more and more if the ecosystem is worth it. But throwing money at Google somehow seems worse.
Sadly, we’ve lost Calyx till Febuary. Fairphone 5 with Calyx is the ultimate private phone. You can also get any Google device and flash Graphene.
Wdym until February?
deleted by creator
That’s what OnePlus, Nothing, and FairPhone are supposed to be about.
It seems that you’re implying they’re not? Could you expand?
OnePlus originally had really nice enthusiast features and support for the CyanogenMod ROM. Now it’s just another manufacturer of corporate-safe glass-and-metal slabs while the soul of CyanogenMod lives on in LineageOS.
Carl Pei left OnePlus and put together Nothing. Nothing is a bit closer to what OnePlus was supposed to be, but they still leave much to be desired. They went all the way to implement a detachable back on the CMF phone, but the battery is still sealed inside. Absolutely no advantage compared to manufacturers like Google in terms of the third-party ROM experience.
FairPhone is the best of the bunch, but their priorities don’t necessarily match those of the community (i.e. security concerns, loss of audio jack and USB 3.0 on the FP6)
Why is Fairphone no bueno?
I don’t have one, but I think they are overpriced for the specs you get.
Their goal is sustainability, but the outdated specs means I’d probably upgrade more frequently than I would with an iPhone where I can upgrade less often.
Didn’t say it was. I said that was the idea behind them. I’ve never used a phone from any of those three.
Shift and Volla are closer than Nothing, I’d say. OnePlus, like you said in another comment, belongs nowhere near that list anymore.
But I have a feeling privacy and security minded folks are going to be moving more towards Linux phones (I know Android uses a Linux kernel) over the next few years, as Android continues to get locked down, and cater to government surveillance.
Huh. I haven’t even heard of those two.
I want to believe Apple has my privacy in mind like they say because I want to believe they’re a computer company first and not an information services company and all that… and it would make me feel better about my iPhone 16 Pro Max having such lousy software running on it… but also because going back to Android seems scary. No good privacy options. Nova is basically dead. Google is going after sideloading. Google is going hard with AI. The Pixel camera straight up hallucinates detail. And yet if I needed a new phone right now it probably would be a Galaxy S25, but I can’t say for sure it wouldn’t be an iPhone 17.
It’s probably not a good idea to believe that. Even if they do fight for you behind closed doors, which I doubt, they will still have to bow to large governments for the sake of their shareholders. That’s the world we live in right now.
I’m on Graphene on a Pixel 8 right now, but I really don’t trust the overall direction that Google is pulling AOSP, nor the closed security chip in Pixel phones. I’m trying to decide if I want to stick with AOSP with a non-Pixel device, or give some form of non-Android Linux phone a shot. The Jolla C2 is looking intriguing, but getting one in the US isn’t the easiest thing. I’ve also considered a Shiftphone 8.1 and Fairphone 6, but I’d want to run Calyx, and the future is murky. The Shiftphone is also tricky to get in the US, as is Volla which comes with an AOSP OS without Google services.
Have a CMF1 from Murena for few months now, pretty happy with it. 350EUR with unlocked bootloader and rooted, used it as daily driver since day one. Transition from iOS was surprisingly painless.
Less expensive than I expected, but no headphone jack, no SD slot, comes with /e/OS.
In the end any mobile phone is inherently privacy invasive because of tracking by the cellular carrier, and the unending security bugs in the software. It’s hard to do much about this.
A headphone jack is just another attack vector! Use your head!!!
no headphone jack, no SD slot, comes with /e/OS.
- I personally didn’t need jack but I understand it might be problematic for some. If you create music for example you might not want the latency but for that I have a dedicated PBG-1 (OSHW grove box) which does have jack. FWIW there are USB-jack adapters.
- it has an SD slot, I have a .5To inside
- comes with /e/OS was the point for me. I wanted a deGoogle Android without any tinkering. If you don’t want that though you can buy straight from CMF but I don’t know with what ROM they will ship.
In the end any mobile phone is inherently privacy invasive because of tracking by the cellular carrier, and the unending security bugs in the software. It’s hard to do much about this.
- if you don’t trust cellular carriers you can setup your own network, e.g. https://www.crowdsupply.com/ukama/ukama but… yeah that’s a bit demanding and obviously nobody else will connect to it. You can use eSIM but still have to trust the resulting carrier. You can rely on WiFi only but same, trust the ISP or encrypt everything you can, have your own VPN elsewhere and hope you can go through deep pack inspection
- on bugs in software… but I like https://www.crowdsupply.com/sutajio-kosagi/precursor is exploring the idea, pragmatically, of verifying the whole stack, hardware included, but it doesn’t go to mobile packed. One could consider this with simpler modem equivalent, e.g. LoraWAN, but with the obvious bandwidth limitation. None of that removes bugs but if the entire stack is verifiable at least it’s about genuine bug, not backdoors.
None currently ,closest is pixel with for now easy unlockable bootloader
Very unorthadox suggestion, but those Vollaphones can come with Ubuntu Touch pre-installed. Best UI experience I had with a phone was an Ubuntu Touch. Pinephones also come with a Linux phone distro.
Fairphone
Rooted
Why would you do that?
I may have terms mixed up. I want to be able to have full control of any software.
Flash TWRP and you’ll have access to a root shell in an recovery.
Graphine os, am not sure if its rooted… But eather way i think its the best one for privacy.
With this question asked, I’d like to build on it and ask what options exists outside the realm of google given their recent bullshit.
For those who know, tell me about the pine phone, fair phone, anything else like this.
When google fucks shit up in the near future, I would very much like to hold on to the ability to side-load apps using obtainium and f-droid indefinitely. Are the pine phone/ fair phone reasonable for this? What pros and cons am I looking at?
You should never buy a phone that’s rooted out of the box, no matter what the company promises. Never.
