Since dipping my toes into the subject of privacy, I kept on exploring more opportunities to take back my own data. This started out quite innocent with a few changes to this site, that evolved into taking great care not to spill my data to “the cloud”. Thank you, Laura and Daniel. It seems that a pattern emerges here. Consistently pulling the plug - I love it.
Since January this year, I migrated form GMail to ProtonMail and took that opportunity to finally settle with a short address on my own domain. The trouble is, simply installing the ProtonMail app on Android does next to nothing if your contacts and address book is are managed by Google. After importing the contacts into Proton, it is still a hassle to create a new one without opening the secure app. So, it was time to go cold turkey on this one. Project Exit Google. To do that, I needed more than a secure e-mail provider. I needed a whole new OS1. Enter LineageOS.
LineageOS is a privacy-focused open source Android OS.
1. The Installation
I’ll be honest with you: it was a pain, and it took several days to get it just right. I have an older Sony XZ1 Compact smartphone, one that according to Google can only run up to Android 9. Well, wrong! With LineageOS, you not only get rid of all Google-focused services and unwanted tracking, you also get the latest Android features as a bonus.
That is, if you manage to get it installed. The downloads builds already gave me trouble: no build for the XZ1. Thankfully, getdroidtips.com has published a bunch of phone-specific tutorials - only these proved to be very confusing: which tool do I need first? Flash the what now? Reboot how many times? Put that where?
The concept is as follows:
- Unlock your phone using the Android Debug Bridge.
- Flash a recovery image of TWRP.
- Use TWRP in recovery mode to prepare the installation by formatting/cleaning/…
- Flash a bootable LineageOS image using TWRP.
- Reboot and pray.
- If you must: flash an Open GApps image - of course I didn’t.
Unfortunately, I first got stuck in a boot loop due to incompatible TWRP/Lineage versions. The combination
twrp-3.5.0-0-20210117-lilac.img solved that. Next, I had issues with hard disk encryption that went away after repeatedly trying to wipe various things in TWRP. Do not forget to make a backup of your stuff…
2. It boots. Now what?
Great! Did you configure encryption settings?
Now all we need to do is to find decent replacements for Google’s convenient services and apps. Don’t get me wrong, I love Google products. I just don’t like the free tracking that comes with it. I’ve read bloggers complaining about “going back to the Dark Ages” because of the loss of Google fluff. Fortunately, using LineageOS feels far from being stuck with secondary-choice material.
Lineage is basically a cleaned-up vanilla Android. As you can see from the screenshot above, you can still install any software you’d like, although some might not work that perfectly, since the Google Play store is gone. ProtonMail’s push notifications don’t work, for instance - but that is a good thing, right? Instead, Lineage relies on the Aurora Store and of course F-Droid. The first is an anonymous shell on top of the Play Store, and the latter… well, is kind of the junkyard, since sadly not many developers choose to push to the F-Droid repository. Of course, installing a downloaded
.apk file works just as well. Yes, both stores will still auto-update your apps. Yes, your favorite banking app still works (at least mine does).
Privacy-aware communication apps
Below is a list of apps I’ve tried and now rely on:
- Messaging: Telegram, Signal, … all work. Sadly, so does WhatsApp.
- Email: the ProtonMail app (although honestly not that great)
- Social Media: Tusky is a great Mastodon client!
I also use Proton to manage my contacts. After importing from my Google Account before installing Lineage, I now can import/export using a
vCard file (although Lineage’s default Contact app did not understand
v4.0: simply replace all occurrences of
3 in the file itself). The process is not automated, but hey. New contacts by default reside in the smartphone, all I need to do is now and then pressing “import” again. Bye bye, Google-kept sensitive data of all my friends and family2.
Privacy-aware Google Maps alternatives
- Hiking: OsmAnd uses Open Streetmap data and has the ability to seamlessly download map data. It’s not great for in-car use, though.
I thought finding a decent alternative was going to be difficult, but I was pleasantly surprised by these two. Give them both a go, even if you’re on the vanilla Android OS! If all else fails, you can still surf to maps.google.com.
A privacy-aware Google Calendar alternative
Here’s where things get a bit more complicated. I heavily relied on Google Calendar’s ease of use and sync capabilities to inform my wife of things I’ve planned (or the other way around), and she’s on iOS. Furthermore, I wanted my MacBook to also use the same calendar: what’s the purpose of a digital calendar if it does not synchronize?
After a few hours of fiddling, I had a Radicale CalDAV server up and running on my own domain, that even works with SSL and the usual encryption stuff. Granted, data is not (yet) stored encrypted at rest, but at least it’s on my own VPS! On Lineage, install DAVx5 - it integrates nicely with the default calendar app. I also rely on ICSx5 to sync my academic calendar using a
.ics link. Both work perfectly.
Privacy-aware cloud syncing
If you must use data syncing using a third party cloud such as iCloud/Google Drive/Dropbox, you still can. Simply use Cryptomator and encrypt everything client-side before sending it to the server. There are mobile clients available, and although it is a bit on the heavy side, it works.
For me though, I decided against using it. My photos are not synced, and I like that now. When I want to transfer something to another machine, I simply share locally through Bluetooth or using the nice OpenMTP Android File Transfer app for MacOS.
A few other apps I regularly use that worked flawlessly on LineageOS:
- Firefox Mobile with the uBlock Origin plugin
- Bandcamp (You Shouldn’t Use Spotify)
- Spotify (Don’t believe everything I write)
After stress testing LineageOS for two weeks, I can safely say I’m impressed. Even the battery life somewhat improved. Granted, I am not a heavy smartphone user. I hate carrying the thing around and sometimes “forget” it, much to my wife’s frustration. But still - I thought getting rid of Google Calendar and others would involve more headaches. I have deleted most e-mails, all my photos, calendar items, and contacts from my Google account, and have not regretted it once. However, do not delete your entire Google account. It now serves as a good spam e-mail address! Give those pesky car salesman your GMail address and they’ll think they’ve got you. Ha!
If you also experimented with the OS, let me know what you think of Lineage. Which programs did not work that well? Did you experience any trouble with the Google withdrawal plan? Let me know!
Others have solved this issue by trading Android for iOS. I think that’s a bit ridiculous. Sure, Apple is less keen on making money through advertising than Google, but don’t tell me iCloud services won’t track you. Still, idle Android phones send data to Google ten times more often than iOS devices to Apple. ↩︎
Note that using WhatsApp also means that all your contacts are sent to their servers. Try this: open up the WhatsApp settings
->Request account info. This is not the case with Signal! ↩︎
Backup your settings before reinstalling your phone! I locked myself out of my Paypal account because of that… ↩︎