Night No tracker
The phone sleeps. Really.

No sleep tracker. No smartwatch uploading heart rate and breathing rhythm to a US cloud server. No server that knows more about this night than I do by morning.

The Pixel 9 is on the bedside table. GrapheneOS automatically reboots the device after prolonged inactivity — a built-in security feature. When locked, all user data is encrypted. There is no way in.

No sleep cloud Fully encrypted Auto-reboot after inactivity
7:12 Waking up
The phone switches on

The alarm goes off. Clock — the default GrapheneOS app, open source, no account, no cloud. No Google service has noticed the day has begun.

Messages come through Molly. A fork of Signal: fully compatible with all Signal contacts, but with an encrypted database, automatic memory wipe on lock, and no dependency on Google for push notifications. To my contacts, I'm simply a Signal user.

ℹ️
On a standard Android phone, Google logs your location from the very first unlock. The timeline starts running. On GrapheneOS this doesn't happen — as long as no Google account is set up.
No location log End-to-end messages No Google FCM
7:45 Breakfast
News — without a feed

Before: Instagram, then Twitter. Now: Vanadium and an RSS reader. No algorithm deciding what I see. No scroll tracking. No profile built from my morning mood.

Vanadium is GrapheneOS's built-in browser — hardened, with JIT compiler disabled, a built-in tracker blocker, and no Google account required. Those who need extensions use IronFox from F-Droid. Full browser comparison: Browser Alternatives →

No recommendation algorithm No scroll tracking No Google sync
9:30 Supermarket
Cash. No loyalty card.

Shopping. Paid in cash. At the till: "Do you have a loyalty card?" No.

Loyalty programmes like Payback — Germany's largest with 31 million active users — store what you buy, when, where, and how often. Combined with app data, partner portals and online purchases, this creates a consumption profile capable of inferring health status, household size and lifestyle habits. The discount in return is roughly one per cent.

Google Pay and Apple Pay don't work on GrapheneOS — Google blocks both services on uncertified systems. That's inconvenient at first. But it's also one of those rare cases where a technical obstacle automatically produces more privacy.

Where possible, I pay cash. For larger purchases I use my debit card — but with clear eyes about what that involves.

ℹ️
Every debit card payment transmits account number, amount, time, date and location to the payment processor, where it is stored. In direct debit transactions, your name is included too. The data goes to your bank, the retailer and an intermediary network operator — not to Google or Meta, but a complete purchase history linked to your account number is created. Data protection authorities in Germany have established that payment processors may store transaction data for a maximum of two weeks; your own bank retains it considerably longer.
No loyalty profiling No payment app tracking Cash = anonymous Debit card: amount + location + time stored
12:40 Online shopping
Shopping — no account, no Amazon

I need a cable. Amazon would be faster. But Amazon would then know: my device, my address, my purchase history, my rhythm — and link it all to everything that came before.

I order from an alternative retailer. Guest checkout available, payment by bank transfer. For the email address I use an alias via my Proton Mail account — a randomly generated address that forwards to my real inbox. If the shop ever sends spam: delete the alias, done.

⚠️
Note (Germany): In February 2025, the Hamburg Court of Appeal ruled that online shops are not obliged to offer guest checkout. Some retailers require a mandatory account — this is legal. Shops with confirmed guest checkout include MediaMarkt, alternate.de, notebooksbilliger.de, Galaxus.de and Thalia.

Delivery goes to the nearest parcel locker — no app, no account. These days, 7 out of 10 online purchases I make are not from Amazon. It takes some getting used to. But it works.

No Amazon account Email alias instead of real address Bank transfer = no PayPal profile
18:30 Dinner
Pizza. Called directly.

Pizza. Tuesdays, that tends to happen.

Food delivery platforms know after just a few orders: your address, favourite restaurant, ordering times, frequency, payment method and — with the app — your location. From this they build a profile: when you're too tired to cook.

I call the restaurant directly. Number from Organic Maps. Cash on delivery. No account, no tracking, no profile.

No app needed No order profile Cash on delivery
20:15 Apps
Where do the apps come from?

GrapheneOS has no Play Store pre-installed. At first that's the biggest culture shock. By now I find it more practical than expected.

F-DroidF-DROIDFree app store for open-source Android apps. No adverts, no account, all apps checked for trackers. — the app store for free open-source software. No adverts, no account, all apps vetted for trackers and proprietary dependencies. Downside: updates often arrive a few days late. I use Droid-ify as a modern client.
Obtainium — downloads APKs directly from the developers' GitHub release pages. Original signature, immediate updates. No curated store: I have to evaluate sources myself.
Aurora Store — anonymous access to the Google Play Store without your own account. Login via shared anonymous accounts occasionally fails. Still useful as a supplement when an app only exists there.
Sandboxed Google PlaySANDBOXED GOOGLE PLAYGoogle Play Services runs on GrapheneOS as a normal, sandboxed app — without system privileges. Permissions can be revoked individually. — GrapheneOS's greatest innovation: Google Play Services can be installed, but runs as a fully sandboxed app with no system privileges. Location, camera, microphone — all individually controllable. Google only gets what I explicitly grant.
F-Droid Obtainium Aurora Store Sandboxed Play
21:00 Messenger
Writing to my brother — via my own server

In the evening I message my brother. Not via WhatsApp, not via some company's server somewhere. Via Element — and the message server runs at my home. On a Raspberry Pi 5.

Element is based on the open Matrix protocol. It works like email: anyone can run their own server. And if you don't have one, you can still message someone who does — just as GMX and Gmail can communicate with each other without being the same company.

What that means: my brother's message lands on my server, in my home. No company has access. No privacy policy I have to trust. No server location in the US or Ireland.
💡
How difficult is it to set up? A few years ago: only for people who've been using Linux for years. Today: doable — with a bit of patience and, honestly, with help from AI. I asked ChatGPT and Claude when I got stuck. The setup worked over a weekend.
Self-hosted No third party Matrix protocol Raspberry Pi 5
Night Again
The phone knows nothing it shouldn't

No server kept a record today. Nobody knows where I went, what I bought, who I talked to, when I fell asleep.

It was a perfectly normal Tuesday.

A Tuesday with GrapheneOS

  • No location history. Nobody knows where I went today.
  • No consumption profile. Loyalty programmes, Amazon and food delivery platforms got nothing today.
  • No payment tracking. Paid in cash — no data point for Google, PayPal or Klarna.
  • No third-party messenger server. The messages to my brother are stored in my home.
  • No Google account needed. F-Droid, Obtainium and Aurora Store cover almost everything.
You don't need to be a developer.
You just need to start.
This is part three of a series. Part one: What a normal Tuesday reveals about you. Part two: What an iPhone knows after Tuesday.
Sources & References
All claims fact-based and verifiable
01
GrapheneOS — Features Overview
Official documentation on Sandboxed Google Play, network and sensor permissions, auto-reboot and security features
grapheneos.org/features
02
GrapheneOS — Usage Guide
Official usage guide: browser recommendations, app installation via F-Droid, Aurora Store and Sandboxed Play
grapheneos.org/usage
03
Molly — Signal Fork for Android
Database encryption via passphrase, RAM overwrite on lock, UnifiedPush support; fully Signal-compatible
molly.im
04
Privacy Guides — Android App Installation
Comparison of F-Droid, Obtainium, Aurora Store and Accrescent; security assessment of app sources
privacyguides.org/en/android/obtaining-apps
05
F-Droid — Aurora Store
Aurora Store as open-source client for anonymous Google Play access; available on F-Droid
f-droid.org/en/packages/com.aurora.store
06
Deutsche Bundesbank — Payment Behaviour in Germany
51% of all payments in Germany are made in cash; 69% of Germans consider cash important (DE-specific data)
bundesbank.de
06b
German Data Protection Authorities — Debit Card Privacy
Authorities established: payment processors may store transaction data for a maximum of two weeks. Every debit card payment transmits account number, amount, time, date and location (DE-specific)
check24.de (source: NDR / data protection authorities)
07
Verbraucherzentrale Bundesverband — Cash Acceptance in Germany (Dec. 2025)
30% of respondents were unable to pay in cash at least once in six months; consumer federation calls for legal protection (DE-specific)
vzbv.de
08
Kuketz IT-Security Blog — Online Payment Methods and Privacy
Analysis of online payment methods; PayPal shares data with up to 600 partners; recommendation: bank transfer / SEPA direct debit
kuketz-blog.de
09
Hamburg Court of Appeal, Ref. 5 U 30/24 — Guest Checkout on Marketplaces
Ruling Feb. 2025: marketplace platforms are not obliged to offer guest checkout (DE legal context)
haendlerbund.de
10
DHL Group — Parcel Locker Without Registration (July 2025)
Pilot project: parcel collection at DHL lockers without an account; collection code by email, approx. 20 partner shops
group.dhl.com
11
Proton Mail — Alias Feature
Proton Mail allows creating email aliases directly in your account — forwarding addresses without revealing your real address; available in the free version
proton.me/support/creating-aliases
12
Privacy Guides — Recommended Maps Apps
Comparison of privacy-friendly navigation apps; Organic Maps and OsmAnd recommended; Magic Earth not recommended due to closed source
privacyguides.org/en/maps
13
Mr. Datenschutz — Transportr as DB Navigator Alternative
Transportr: open source, on F-Droid, Deutsche Bahn support; DB Navigator contains 7 trackers according to Exodus analysis
mrdatenschutz.de
14
Terence Eden — Contactless Payments with GrapheneOS (June 2025)
Practical report: Google Pay unavailable on GrapheneOS; NFC payment via Curve confirmed
shkspr.mobi
15
ZDF heute — Payback and Data Privacy
Payback creates detailed consumption profiles from 31 million users; partners include dm, REWE, Aral and others (DE-specific)
zdfheute.de
16
Wikipedia — GrapheneOS
Overview: origins, supported devices (Pixel 6–10), Sandboxed Google Play, community development
wikipedia.org/wiki/GrapheneOS
17
Privacy Guides — Messenger Recommendations
Comparison of Signal, Molly, Element/Matrix, SimpleX Chat; criteria: encryption, metadata protection, anonymity
privacyguides.org/en/real-time-communication
18
Matrix.org — The Open Communication Protocol
Official documentation on Matrix: decentralised, federated messaging protocol; Element as client; self-hosting with Synapse or Conduit
matrix.org