GrapheneOS runs on Google Pixel hardware (ironically), chosen because Pixels have the best security chip support. It strips out all Google services by default, but lets you run them in an isolated sandbox if you still need apps like Gmail or Maps — they can't see the rest of your phone. You get granular control over every app's permissions, including whether it can access the network at all. This allows you to own a modern phone while avoiding so much garbage on iOS and stock Android.

The installation is extremely simple with their provided guide. All you need is to purchase an unlocked Pixel phone, ideally a Pixel 8 or later.

Navigate to Settings and search for User Profiles. Create a new user and determine what apps and system permissions you want to give them. Disable app installation & update.

Use the Universal Android Debloater tool after entering the new user profile to remove the App Store, Vanadium browser, and other apps like Phone and Messaging.

Ensure that profile is active when your child uses the phone.

First, open a terminal and enter the following commands.

Have your child log onto that user account for all of the changes to apply.

You'll find parental controls in both operating systems. They will be generally straight forward. Again, it's not sensible to use these operating systems unless you absolutely have to. And, even if you do, you should be dual booting Linux for everything outside of the essential things.

...

...

Security cameras from companies should never be installed. What you need is something that you control entirely.

By self hosting, you own all of your data.

...

Yes, it's true. Selfhosting is really the only way to privately have smart device luxury and escape all the spying.

...

Firefox tried to do what Ladybird is doing. While Firefox pledged to not sell user data, they have since retracted this longterm promise. They are no longer the better alternative to the Chrome/Chromium Browser. Ladybird is being built by seven individuals full-time, and another 1,252 and counting who've helped. Seeing as the browser is one of the most important platforms in computing, it only makes sense to use the browser that values you over money, or anything else.

As of now, Ladybird is still in it's infancy, so the temporary workaround is using the next best alternative, Brave Browser.

Brave is the easiest Chrome replacement for people who don't want to change their habits. It looks and feels almost identical, supports all Chrome extensions, and blocks ads and trackers by default without any setup. For most people making the switch, the experience is better immediately.

The main critique of Brave is that it's still Chromium — meaning Google still shapes the underlying engine, and Brave has to fight Google's decisions from within. It also has the crypto rewards system, which you can disable, but its existence signals a business model that some find uncomfortable.

This is ideally the only messaging app you should have to use. Of course, because of SMS, RCS, and iMessage, this will likely not be the case.

One of the best features about XMPP is that you can send nay file or video at their full quality. No more dealing with crappy photos!

The only email that is moderately private is one that you run yourself.

If you can think it, you can do it in Linux. About every program mentioned on this page runs best on linux, and so does your personal computing. You can make the most stable or flashy computer you want. It's also miles ahead of Windows and macOS with regard to privacy. That's why, despite the huge market share difference, I can't recommend using macOS or Windows.

Because of the flexibility of Linux, hundreds of "distributions" exist. They all are Linux but differ just in what is preinstalled, how you install packages, and how the system initializes. I chose Void Linux, as it seems to have the best of all worlds.