Privacy apps by category: what to use on any phone
The best privacy apps per category — for GrapheneOS, regular Android, and iPhone. Signal, Bitwarden, Organic Maps and more: these apps work on every platform.
Privacy apps by category
Most apps in this list work on GrapheneOS, regular Android, and iOS. You don’t need to switch phones to get started. This is not an exhaustive list — it is a starting point of recommended apps per category, including what you give up.
Communication
Signal
The standard for encrypted messages and calls. End-to-end encrypted, open-source, no ads.
Caveat: Signal requires a phone number. If you want anonymity at registration, use a prepaid number or a VoIP number.
Installation: signal.org/android/apk (direct download) or sandboxed Google Play.
Element (Matrix)
For decentralised communication without a central server. Suitable for groups and communities. More technical than Signal but fully open.
What about WhatsApp?
WhatsApp is owned by Meta and collects metadata — who you message, when, how often. The content is encrypted but the context is not. For daily contact with people who do not use Signal: use WhatsApp in a separate profile or via sandboxed Google Play, isolated from your other data.
Browser
Vanadium (default) — GrapheneOS only
GrapheneOS’ built-in browser. A hardened version of Chromium. Use this for daily browsing on GrapheneOS.
Add uBlock Origin as an extension — it blocks ads and trackers and noticeably speeds up browsing.
On regular Android or iOS: use Firefox (with uBlock Origin) or Brave. Both support extensions and have built-in tracking protection.
Tor Browser
For anonymous browsing. Traffic runs through the Tor network — your IP address is not visible to the websites you visit.
Caveat: Tor Browser is slower than a regular browser. Use it deliberately, not as your default browser.
Available via the Guardian Project F-Droid repository.
ProtonMail
Swiss email service, end-to-end encrypted for messages between Proton users. Free basic account, paid for more storage and custom domain.
Caveat: Email is a structurally insecure protocol — encryption only works when both parties support it. For sensitive communication: use Signal.
Tutanota
Similar to ProtonMail, also end-to-end encrypted. Based in Germany. Slightly more limited in features than Proton but fully open-source.
Passwords
Bitwarden
Open-source password manager with cloud sync. You can also self-host the server if you want. Free for personal use.
If you do not yet use a password manager, start here. Unique passwords per account is the single most effective security measure most people can take.
Available via F-Droid or sandboxed Google Play.
Maps
Organic Maps
Offline maps based on OpenStreetMap. No account, no tracking, works without internet once the map is downloaded.
Caveat: Less up to date than Google Maps for new roads and businesses. For navigation around the Netherlands or your home country: fine. For real-time traffic information: not.
Files and storage
Nextcloud
Self-hosted cloud sync as an alternative to Google Drive or iCloud. If you do not want to manage your own server: various Nextcloud providers offer this as a service.
What you give up
Being honest: some things work less well or not at all:
- Google Maps navigation with real-time traffic is better than Organic Maps
- Netflix and Disney+ sometimes do not work without sandboxed Google Play
- Games with DRM or Google Play Games may not work
- Some loyalty programme apps do not work
These are real trade-offs. Decide for yourself what weighs more. There is no perfect solution — only better choices.
See also: