GrapheneOS is the gold standard for mobile privacy and security. It's not just "de-Googled Android" — it's a comprehensively hardened operating system that improves on AOSP's security in ways Google themselves haven't done.

What Makes It Special

• Hardened memory allocator — custom malloc implementation that makes heap exploitation significantly harder. This is the kind of hardening that security researchers dream about.
• Hardened kernel — additional SELinux policies, strengthened ptrace restrictions, and kernel self-protection features beyond stock Android.
• Exec spawning — re-randomizes memory layout for every app launch, defeating ASLR bypass techniques that work on stock Android.
• Scoped storage enforcement — apps can't access shared storage without explicit, revocable permission. Stricter than stock Android.
• Network toggles per-app — block internet access for any individual app. No more "flashlight needs internet."
• Sensor toggles — disable camera, microphone, accelerometer, gyroscope, proximity sensor, and compass globally with quick settings tiles.
• Sandboxed Google Play — the killer feature. Run Google Play Services in a sandbox where it has no special privileges. It can't access your contacts, SMS, call logs, or system internals. Apps that depend on Play Services still work — but Play Services itself is contained.
• Verified Boot — full chain of trust from hardware to OS. Tampering with the OS is detected at boot and blocks startup.
• Automatic updates — seamless, background, no Google account required. Faster patch delivery than stock Pixel.
• No telemetry, no analytics, no tracking — zero. Nothing leaves your device without your explicit action.

The Catch

GrapheneOS only runs on Google Pixel devices. This sounds contradictory — why use privacy OS on a Google phone? The answer is hardware. Pixels have the Titan M2 security chip, support for AVB (Android Verified Boot), and are the only devices where GrapheneOS can leverage the full hardware security stack. The GrapheneOS team has evaluated other devices and found them lacking. You're buying Google hardware to run an OS that strips out Google's software. The hardware is excellent. The software that ships on it is replaced entirely.

CalyxOS sits between GrapheneOS and stock Android. It offers significant privacy improvements while maintaining broader device compatibility and easier setup. If GrapheneOS is a fortress, CalyxOS is a well-fortified house that still feels like home.

What Makes It Different

• DroidGuard compatibility — includes a fallback mechanism for apps that require Play Integrity/SafetyNet. More apps work out of the box than on GrapheneOS.
• MicroG (optional) — an open source reimplementation of Google Play Services. Provides location, push notifications, and account integration without Google's proprietary blobs. You choose: fully de-Googled, or microG for compatibility.
• Calyx Institute backing — non-profit organization focused on privacy rights. No corporate agenda.
• Broader device support — runs on Pixel, Motorola, Fairphone, and some Xiaomi devices. More options than GrapheneOS.
• Pre-installed privacy apps — comes with Signal, Tor (Orbot), Briar, DuckDuckGo, Aurora Store. Ready to use immediately.
• Seedvault backup — open source, encrypted local/on-device backup solution. No cloud dependency.

CalyxOS does not harden the kernel and memory allocator like GrapheneOS does. It's closer to stock AOSP with Google services stripped and privacy tools added. For most users, this is sufficient. For security researchers and targeted individuals, GrapheneOS offers deeper protections.

LineageOS is the successor to CyanogenMod — the original custom Android ROM. Its focus isn't primarily privacy; it's about giving you control over your device, extending its lifespan beyond manufacturer support windows, and providing a clean Android experience without OEM bloatware.

Privacy Implications

Out of the box, LineageOS doesn't include Google Play Services. This means it's de-Googled by default — but it also means no push notifications, no location services, and no app store until you install something. Most users flash GApps (Google Apps package) alongside LineageOS, which reintroduces Google's tracking. So the privacy depends entirely on what you install.

With F-Droid (open source app store) and microG, LineageOS can be configured as a privacy-respecting OS. But it requires manual effort. LineageOS doesn't include the security hardening of GrapheneOS or the privacy toolkit of CalyxOS. It's a blank canvas.

The Real Value: Device Longevity

Where LineageOS shines is keeping old hardware alive. A Samsung S10 abandoned by Samsung in 2023 can run LineageOS 21 (Android 14) with security patches. This reduces e-waste, saves money, and denies manufacturers their planned obsolescence strategy. That's a privacy win in itself — newer devices with newer basebands and firmware have fewer known vulnerabilities.

/e/OS (formerly eelo) is built on LineageOS but with a singular mission: make a de-Googled phone that anyone can use. No terminal. No compiling. No microG configuration. It just works, out of the box, without Google.

Philosophy

/e/OS replaces every Google service with privacy-respecting alternatives:

• App store — App Lounge, which aggregates F-Droid and a clean Play Store proxy. You can install Play Store apps without a Google account.
• Email — Murena Mail, with free hosted @murena.io email accounts.
• Cloud — Murena Cloud (Nextcloud instance) for file sync, calendar, contacts. E2EE available.
• Maps — Magic Earth (offline maps, no tracking).
• Search — DuckDuckGo or Brave Search.
• Assistant — None. By design. Assistants listen. /e/OS doesn't.

The result is a phone that looks and feels like Android but doesn't send a single byte to Google without your knowledge. It's the closest thing to "install and forget" in the de-Googled space.

DivestOS is what happens when you take LineageOS and actually harden it. It's the bridge between LineageOS's broad device support and GrapheneOS's security philosophy. Think of it as "GrapheneOS for non-Pixel devices."

• Hardened kernel — custom kernel patches inspired by GrapheneOS for devices GrapheneOS doesn't support.
• Patched firmware — ships with the latest available firmware for each device, even when the OEM has stopped updating.
• Encrypted by default — full disk encryption on all supported devices.
• Reproducible builds — security-focused, verifiable build process.
• F-Droid as default app store — no Google Play Services included.
• 20+ year maintainer — single passionate developer with a transparent development process.

You don't have to leave iOS to improve your privacy. While iOS is closed source and you're dependent on Apple, the Lockdown Mode feature provides extreme security hardening for targeted individuals.

What Lockdown Mode Does

• Blocks most message attachment types — images, videos, and documents from unknown senders are blocked. iMessage is the #1 vector for zero-click exploits.
• Disables web fonts and preview rendering — Safari loads minimal content. Reduces attack surface for web-based exploits.
• Blocks incoming FaceTime calls from numbers you haven't previously contacted.
• Disables wired accessory connections when the phone is locked. Prevents forensic tool extraction via Lightning/USB.
• Blocks configuration profile installation — prevents MDM enrollment attacks.
• Disables preview images in shared albums.

Additional iOS Hardening Steps (No Jailbreak Required)

• Enable Advanced Data Protection — E2EE for iCloud backups, photos, notes, reminders. Apple can no longer read your data.
• Disable Significant Locations — Settings → Privacy → Location Services → System Services → Significant Locations. Off.
• Disable Analytics & Improvements — all of it. Settings → Privacy & Security → Analytics & Improvements.
• Limit ad tracking — Settings → Privacy → Apple Advertising → Personalized Ads: Off.
• Use Sign in with Apple instead of Google/Facebook OAuth. Apple doesn't share email or tracking data with the app.
• Review app permissions periodically. Photos, location, contacts — revoke what doesn't make sense.
• Use iCloud Private Relay — Apple's partial VPN solution. Hides IP from websites. Not as strong as a real VPN, but better than nothing.
• Use third-party privacy apps — Signal, Proton Mail, Brave, Proton VPN, Bitwarden.