GrapheneOS
The best option for a phone is probably one that supports GrapheneOS. GrapheneOS is a secure mobile operating system based on AOSP with additional hardening and Android app compatibility.
Hardware
As GrapheneOS is currently only supported on Google Pixel phones, it is recommended to get any of the currently supported ones.
Software
GrapheneOS is pretty minimal out of the box. Using the built-in app store and the Google Play Store, as well as the Google Play Services, can be installed.
Apps
Apps are very personal, but nevertheless I tried to mention most of the ones I use here. Generally I favor software that comes with the operating system, e.g. Vanadium on GrapheneOS, unless there is a reason not to use it.
| Name | License | Country |
|---|---|---|
| Aegis | FOSS | |
| Auxio | FOSS | |
| Calendula | FOSS | |
| CAPod | FOSS | |
| comdirect photoTAN | Proprietary | 🇩🇪 DE |
| DAVx5 | FOSS | 🇦🇹 AT |
| DWD WarnWetter | Proprietary | 🇩🇪 DE |
| FossWallet | FOSS | |
| FUTO Keyboard (*) | FUTO | 🇺🇸 US |
| Google Camera (*) | Proprietary | 🇺🇸 US |
| Google Maps | Proprietary | 🇺🇸 US |
| Google Play Games | Proprietary | 🇺🇸 US |
| Google Play Store | Proprietary | 🇺🇸 US |
| jtx Board | FOSS | 🇦🇹 AT |
| LocalSend | FOSS | |
| PayPal | Proprietary | 🇺🇸 US |
| Proton Drive | FOSS | 🇨🇭 CH |
| Proton Pass | FOSS | 🇨🇭 CH |
| Refra Gallery (*) | FOSS | |
| RMVgo | Proprietary | 🇩🇪 DE |
| Rossmann | Proprietary | 🇩🇪 DE |
| Signal | FOSS | 🇺🇸 US |
| Thunderbird | FOSS | 🇺🇸 US |
Proprietary | 🇺🇸 US | |
| YouTube | Proprietary | 🇺🇸 US |
(*) Consider replacing this app with the stock app once it got overhauled.
Contact Scopes
One of the most important features of GrapheneOS is called Contact Scopes, which allows you to expose only a subset of contacts to apps instead of all or nothing. The contacts permission is needed by Google Play Services and other Google apps to interface with the Google account. But instead of granting it full access, we can leverage contact scopes to grant that permission without exposing any contacts to Google.