The Google Lock-in Dilemma
The Google Lock-in Dilemma
You phrased it a bit too harshly to be constructive, but that’s basically the way.
OP you don’t have to ditch it all at once. Just make yourself familiar with FOSS alternatives to these apps and once you’re content using those it will be easier to ditch the proprietary ones.
But what do you actually need in the first place? I mean it, all the stuff you mentioned I’ve never touched on a phone, how much worse would your life be without them?
You definitely don’t need any programming learning apps to learn programming, I know that because I’ve personally done it. AI chats serve what purpose? Can’t you chat with real people? Art generators for what? What did you do before you were able to generate art? Audio and video editing on a phone means you can’t be doing this professionally, what are you actually editing? Why not do it on an older laptop with larger screen that actually has access to open source apps that do this properly and almost as good as professional proprietary software?
microG has several options regarding paid apps, about licensing, billing and stuff. When logging in into Aurora using your Google account, you should be able to use paid apps.
I mean in the end you are for sure breaking ToS so the chance of your account getting banned is non-zero, but it should be possible. Let me know if you need more information on that.
I hear you - there’s been some things I’ve had to give up as a result of degoogling, including access to multiple paid games and services.
It’s also what has stopped me completely deleting my Facebook account - I have VR purchases tied to it.
In the end I just have to keep reminding myself that there WILL be alternatives, and in the cases where there aren’t, I made do without these things once.
People get addicted to paid apps and services and then complain they can’t escape the ecosystem… I never paid for apps through Google, never used Google account on a phone. Programming learning: hackerank, codewars and dozens more available for free on the web. Video editing: Kino, Openshot and banch more available for free on desktop AI chat: Claude subscription Art generator: OpenAI on web Audio editing: Audacity, LMMS and a lot more
Oh, but those are not as convenient as your paid Android apps? Ok, call it by it’s name than: you’re paying with your privacy for convenience. If convenience is more important to you that’s fine, just don’t complain about lack of privacy. You can’t have both.
I did have issues with notifications in the past when using graphene, but my experience may have not been universal. But I was far from the only one experiencing this issue. Maybe they’ve improved it since my last time using it on a main device. It does seem that things have improved based on what you say though, so thats good.
Banking apps do require some level of google services. With work profiles, you’re putting faith in your apps being isolated in the hands of a third party, which is okay if you can trust that it. But you also can’t control when apps in a work profile stop running, thus google services may still be running in the background of the work profile. Doing the really inconvenient method where you have separate user profiles seems more reliable for privacy yet inconvenient.
This video speaks well about the difference between user and work profiles and the privacy differences: youtu.be/20C0FD7mGDY
Yeah, ideally you would just use a dumb phone or some Linux phone.
Worst thing you can do is to use stock Android with Google account connected to everything (gmail, contacts, gpay, maps, calendar, play store).
Work profile is a great compromise, a lot better then using an iPhone.
I’d definitely jump for a Linux phone once they get their formula down. I was hyped for the Pinephone but realized they still need a bit of work.
No phone is truly private these days, but Graphene is the best we have. If we’re talking stock os, ios is slightly better. But I use it keeping in mind my data is still up for grabs.
Unfortunately some really just don’t work, you got lucky. There’s a whole list of reports on GitHub about which ones work and don’t work, and unfortunately, the two I use the most didn’t, which is Navy Federal and PayPal. I tried both but they crashed everytime, and I couldn’t get past login.
Annoyingly, I just got a discover credit card, and Discover’s app works just fine, even though I don’t plan to use it nearly as much 🙄
But yeah some apps do not like how we don’t have safety net, hell, you can’t use Google Wallet and tap to pay which is a downer…
the two I use the most didn’t, which is Navy Federal and PayPal
Have you tried Exploit protection compatibility mode?
modded from other sources
True! But depending on the obscurity of the app it can be hard to find non-malware versions of such modded apps.
Scan your sus APKs, folks! Its fast and free – Virustotal.com does a pretty good job 🙂 I’ve caught a coupla apk Trojans there in the past!
Everyone saying you can’t have Graphene and google store apps as a daily driver gave up day one. I’m about 10 months in now.
Graphene sandboxes all the apps, including google services. Yes, it’d be ideal to ditch google all together but reality makes that not feasible for a lot of people. Which is why graphene went through the effort to makes google services work.
You do have to download Google Services Graphenes own mini “app store”. gmail 2FA works, play store/and restoring purchases works, Android Auto works, push notifications work.
It is true, some apps do not work on graphene. Mostly banking apps with extra security. There is a compatibility mode you can set for the app that reduces Graphene’s restrictions on the app. Sometimes that works.
You don’t need to run any binaries from Google on your phone, and still get most apps running fine with CalyxOS.
It’s not as hardened as Graphene, but I’m just looking for privacy while still having reliability and functionality.
It’s been 3yrs as a daily, works great with my banks,a few medical applications etc. Tap to pay still doesn’t work, and I don’t want a Google account anyway.
Yeah it’s the DRM shit. You own a music CD? You can listen it to car, computer, home, friend’s house whatever. You own digital music, movies, games, apps on platforms, well good luck.
I deleted my Google account some weeks ago. I gonna miss mini Metro and KGWT when i transition to LinageOS. Overall it went smooth, but some apps don’t work (chatGPT for example, Deepseek is more smart offers apk without play store). My bank app is working though.
But i am not sure what happens with safety. Currently the phone uses phone protect and Knox from Samsung. But in LineageOS i must find out how the safety works.
I am. But you need having play store enabled and connected to an account to use chatgtp or deepseek from aurora. Basically they were popping up the play store to connect to a google account, so i deleted them. Some apps are tied strongly to google services that they check the play store connection.
I don’t know if MicroG fixes that but i need to root my phone or some other stuff that i won’t gonna do right now. In 3 months the phone is losing the warranty and i gonna just move to LineageOS.
The thing people often dont realize is that if you do end up caving in and installing Google app services back onto your de-googled phone and logging into your old Google account - well, you’re almost back to square one. Google now ties all the identifiers of that phone/OS to your old Google account and will continue tracking it as much as possible whenever it sees those identifiers accessing anything. So I’d avoid that if your goal is de-Googling, but I understand why some need it as a stop-gap.
I thought the same initially re: sunk costs, but when I actually sat down and made a list of the apps I had on my old phone and what I used them for, I could quickly see that almost half of them were already FOSS. Then checked what alternatives are available for others and realized i could actually replace almost everything. The only premium apps I ended up “needing” were Poweramp*, and a couple others I actually forget now without finding my list. Almost everything can be replaced by using the website as a web link or web app, or using an open source alternative.
A big bonus of that process was seeing on the Aurora Store how many trackers were detected in each of the old apps while i was reviewing them and it was insane. I remember one Sudoku app I’d installed years back had like 16 trackers… Wtf. Checked FOSS options on F-Droid and found several alternatives.
*Poweramp can be bought direct from the developer, no need for Google apps, so I repurchased it via that method so I could avoid using my old account. I don’t mind buying things a second time if the devs have made the facilities available to avoid Google. I recently did the same for Symfonium.
The only ones that stung a bit to abandon was Sleep As Android which I’d paid for (I use their limited free version now and block it on the firewall to prevent ads/tracking); and Sygic (gps app) I’d paid lifetime maps for… I just use Organic Maps now, and while it’s not as fancy it navigates just fine and I use it regularly for car GPS.
Things like Shazam that there’s not really a FOSS alternative for but are free (with questionable tracking) you can install as a ‘work profile’ app via Shelter, which means it has no access to your real contacts and personal data, and can be set to auto-freeze (deletes cache and pauses app, keeps personal data). So you can use it and expose minimal data, and it can’t tie it back to a Google account to profile you as it doesn’t see one.
So far I’ve never needed a Google account on this phone, which means it’s been a clean break from Google entirely. 3 years now and very happy with the results.
Using a Pixel 5 on Calyx OS. I was attracted to CalyxOS and Graphene as they both use a locked bootloader allowing OTA updates and keeping the boot process secure. I’d say either are good choices. I’ve been very happy with CalyxOS, only a few minor issues in the few years I’ve been on it (a tile button not working in one update, that kind of minor stuff).
This phone model is EOL now and only getting security patches, so im on the lookout for a Pixel 8 to move to (going second hand for costs). I’m planning to give GrapheneOS a try for a few weeks when I upgrade as I’ve read good things about it and will have a good yardstick to compare it to now with my time on CalyxOS.
P. S. I think the Proton CEO thing is overstated - he praised an anti-big-tech pick for the (iirc) Assistant Antitrust Attorney General (that is objectively good), and then backed it up saying he is very hopeful this person with a proven track record litigating against big tech will take on their monopolies that have been hindering players like Proton heavily over the years. His statements were always going to be taken poorly though (any Trump action being praised - even if the action was good, is a red flag because Trump is a disaster for a thousand other reasons and people are understandably on edge), and the follow-up comments should never have been done from the official Proton social media account - which is something Proton also stated, and said wouldn’t happen again. Me: OK that’s strike one. I’m not throwing them out after 9 years of very positive work for one failure, I think there’s a tendency in the privacy community to ‘let perfect be the enemy of good’ and for me at least this is an example of that.
I’m keen to give GrapheneOS a try when I upgrade to my next phone, it’s got some privacy enhancements that CalyxOS doesn’t (my current OS). The sandboxing is cool and every bit of obfuscation helps.
However unless your phone is on an always-on VPN with an IP isolated from your other devices, or you’re in a bulding full of other users to obfuscate your traffic somewhat, then just accessing your Google Play account via the phone will give them your public IP address and they’ll be able to tie that heuristically to your other data/accounts.
Eg scenario: you have a laptop at home, it browses and has a bunch of cookies saved, it uses your public IP. Google is all over the web, inescapable while browsing, and through browser fingerprinting has an advertising profile saved for your device even if you’re not logged into an account, this is often called a ‘shadow profile’. If it sees another device (your phone) on the same network (same internet IP) regularly accessing the same sites - those devices are likely linked in their database as ‘likely same user’, with frequency they will be merged permanently as same user. If you then log into your old Google Play account on the phone - boom, all history for that account is now linked in their database to any other profile identifiers for the shadow profile eg cookies, browser fingerprints etc. They don’t need you to log in multiple times, once is enough to confirm owership of that device & account. Opsec is a cat and mouse game and Google (and the other surveillance capitalism giants) are literally the most valuable businesses in the world because they’re good at tracking users to create personal profiles for them.
Things like Shazam that there’s not really a FOSS alternative for
Audire - github.com/alexmercerind/audire.
Like most rugged stuff the phone seems to be aimed at businesses which is probably why they don’t advertise it more broadly. I doubt most consumers have much interest in rugged devices. Since they are usually mediocre or even bad in many aspects that consumers seemingly care a lot about. Like camera, weight, size, and display.
It’s a cool phone though.