Privacy apps by category: what to use on any phone
## Who this guide is for
Privacy apps by category
Who this guide is for
This guide is for people who want practical app replacements that work on ordinary phones as well as more privacy-focused setups.
It fits especially:
- readers who want to improve their phone without changing everything at once
- people on GrapheneOS, regular Android, or iPhone who need a sensible starting list
- users trying to replace the highest-impact apps first instead of turning this into a full migration project in one day
What you gain, and what it costs
If you use this page well, you gain:
- a shorter path to the app categories that matter most first
- replacements that work across multiple phone setups instead of only on niche devices
- a better chance of making changes you will actually keep
What it costs:
- some app migration friction
- occasional tradeoffs in convenience, ecosystem integration, or polish
- the discipline not to turn this into a replace-everything-at-once checklist
When this is overkill
If you are only ready for one or two changes, that is fine. Start with messaging and passwords instead of trying to rebuild your whole phone in a weekend.
This page is most useful when you want a realistic sequence of app changes, not an ideological purge of every mainstream app immediately.
Most apps in this list work on GrapheneOS, regular Android, and iOS. You don’t need to switch phones to get started. This is not an exhaustive list — it is a starting point of recommended apps per category, including what you give up.
Don’t use this page as a checklist to replace everything at once. The right question is: which app replacement actually gives you real gain right now without breaking your daily use?
For most readers the best order is:
- messaging and passwords
- browser and maps
- email and storage
- heavier or niche apps after that
Communication
Signal
The standard for encrypted messages and calls. End-to-end encrypted, open-source, no ads.
Caveat: Signal requires a phone number for registration. If you want to keep registration as private as possible, use a number you control that can reliably receive verification SMS or calls.
Installation: for most Android users, sandboxed Google Play is the simplest route. Signal’s direct APK is mainly for advanced users who deliberately want to install outside Play. Once Signal is installed: configure the key settings — disappearing messages, hiding your phone number, and restricting notifications take about 10 minutes.
Element (Matrix)
For decentralised communication without a central server. Suitable for groups and communities. More technical than Signal but fully open.
Don’t use Element as an automatic replacement for family or friend chat. For most readers Signal remains the more logical default; Element is more for teams, communities, and people who specifically want federation.
What about WhatsApp?
WhatsApp is owned by Meta and collects metadata — who you message, when, how often. The content is encrypted but the context is not. For daily contact with people who do not use Signal: use WhatsApp in a separate profile or via sandboxed Google Play, isolated from your other data.
Browser
Vanadium (default) — GrapheneOS only
GrapheneOS’ built-in browser. A hardened version of Chromium. Use this for daily browsing on GrapheneOS.
Vanadium does not support extensions. Use its built-in hardening, strict site permissions, and, if needed, a DNS or network layer for extra blocking.
On regular Android: use Firefox or Brave.
On iOS: use Firefox Focus, Safari with strict settings, or Brave. Do not expect desktop-style extension support on iOS.
Tor Browser
For anonymous browsing. Traffic runs through the Tor network — your IP address is not visible to the websites you visit.
Caveat: Tor Browser is slower than a regular browser. Use it deliberately, not as your default browser.
Available via the Guardian Project F-Droid repository.
If you’re unsure whether to use Firefox, Brave, or Tor Browser, see the browser comparison. Tor Browser is not an upgrade path for everyone — it is a separate tool for anonymity.
ProtonMail
Swiss email service, end-to-end encrypted for messages between Proton users. Free basic account, paid for more storage and custom domain.
Caveat: Email is structurally a weaker medium than chat apps. For sensitive communication: use Signal.
Tutanota
Similar to ProtonMail, also end-to-end encrypted. Based in Germany. Slightly more limited in features than Proton but fully open-source.
Passwords
Bitwarden
Open-source password manager with cloud sync. You can also self-host the server if you want. Free for personal use.
If you do not yet use a password manager, start here. Unique passwords per account is the single most effective security measure most people can take.
Available through Bitwarden’s own F-Droid repository or sandboxed Google Play.
Maps
Organic Maps
Offline maps based on OpenStreetMap. No account, no tracking, works without internet once the map is downloaded.
Caveat: Excellent for offline maps and basic navigation, but weaker than Google Maps for live business data and traffic.
Files and storage
Nextcloud
Self-hosted cloud sync as an alternative to Google Drive or iCloud. If you do not want to manage your own server: various Nextcloud providers offer this as a service.
For most readers this is not the first replacement. If you just want out of Google Drive without running your own server, Proton Drive is usually the lighter step. Nextcloud makes more sense when you want more control or already have a provider or administrator.
What you give up
Being honest: some things work less well or not at all:
- Google Maps navigation with real-time traffic is better than Organic Maps
- Netflix and Disney+ sometimes do not work without sandboxed Google Play
- Games with DRM or Google Play Games may not work
- Some loyalty programme apps do not work
These are real trade-offs. Decide for yourself what weighs more. There is no perfect solution — only better choices.
Next step
Go further
- Two-factor authentication guide — the third baseline layer once Signal and Bitwarden are in place
Reviews
- Signal and Molly review — encrypted messaging
- Bitwarden review — password manager
- Aegis review — two-factor authentication
- Browser comparison: Firefox vs Brave vs Tor Browser — choose the right browser for your level
- Nextcloud review — self-hosted cloud storage
- Proton Drive review — lighter cloud step than self-hosting
- Proton Mail review — encrypted email