I found out I'm lost inside

Okay, first some background context for the uninitiated (feel free to skip this bit if you're already a nerd) 🤓

GrapheneOS is an alternate Operating System (OS) designed specifically for privacy and security. An OS is the backbone of any computer, like Windows, Mac, or Linux; It controls the keys to the kingdom, and every app and operation is built on top of it, so it is supremely important to your device.

GrapheneOS is built on the Android Open Source Project (AOSP), which was itself built on Linux. This was the original vision of both Linux and Android; Free Open Source Software (FOSS), which allowed anyone with the requisite skills to audit the code (which, since nerds love to audit code, helps it stay safe and secure), alter it (providing freedom for developers to improve it), or build apps for it (creating a truly free marketplace for app developers). This is very much the spirit of the nice side of computer geekdom, the free internet, and benevolent hackers; security and performance through an egalitarian semi-anarchistic meritocracy.

However, in 2005 google bought up Android, and quickly began to erode the open source ethos represented by Android. Through the use of the Mobile Application Distribution Agreements (MADA), they forced all Android phone manufacturers to pre-install google apps on their devices. These apps have special "root" access to the OS, meaning that they have a backdoor to every single part of the phone; they can track every detail (keyboard entries, cameras, mics, sensors, GPS, even activity within non-google apps). And google has been steadily adding to this suite of apps, as well as the depth and breadth of the data they collect. It is impossible to delete many of them, and some cannot even be disabled. For the vast majority of users who don't even look at the permissions granted to their apps by default, this is a virtual smorgasbord of exquisitely detailed data from people's most intimate device. Why does that matter? Please refer to the 'googlemonster' post further down in this community. And why is this particularly important right now? Please refer to the 'google wants to control our phones post, also further down in this community.

Last general note; GrapheneOS only officially supports installations on google pixel devices. Weirdly ironic, I know, but they feel that the pixel is the only device whose hardware can properly support their 'hardened' OS. That said, they are currently in negotiations with Motorola to produce an out-of-the-box GrapheneOS phone. If installing it yourself seems daunting, just keep an eye out for the Motorola, which will hopefully become available in early 2027.

-------------------------

Okay, so - my experience:

- Installing it could hardly have been easier. I bought my Pixel 10 through US Mobile, so had to wait 60 days and then contact them to unlock my phone (~30min). If you buy an unlocked Pixel, this isn't necessary (and Graphene warns that not all carriers will be able to accommodate unlocking). The online instructions were very clear and simple, and their website actually handled most of it automatically; after making sure I had the few simple prerequisites covered, I simply plugged my phone into my PC and followed the prompts. There are some decent youtube videos on the process if you want to see it first hand.

- Post install I was even more impressed. More often than not, simplicity must be sacrificed for the sake of privacy, but not here. This is no joke plug-and-play privacy. Exactly opposite to most tech, all of the defaults were preset to protect me, rather than exploit me. It's a beautiful thing to see a device completely free of bloatware, to know that you're not faced with hours of pouring through apps and settings to delete what you don't want/need, disable crap you can't uninstall, and tweak a thousand settings from their intrusive defaults. But the GrapheneOS defaults also take into account the necessities of modern functionality, and so aim for a reasonably secure middle ground.

- This middle ground is where is where it really starts to shine. Even if you're already savvy to the benefits of free-open-source-software (FOSS), you've got to be a serious hardliner to not need at least a few mainstream apps. And on Android, most of them require google play services and/or google play store (though Aurora Store is usually the better, private way to access google play store). But GrapheneOS is ready for them; it prevents them from inherently accessing weird permissions (eg, contacts, microphone, or "sensors"). Alongside the usual app controls, it adds granular app controls you've never even seen before (like the "hardened memory allocator"). And in the most common areas of vulnerability, they've built solid custom solutions (like the GrapheneOS location data proxy).

There are of course places where apps are just too stupidly invasive to play ball, but GrapheneOS has that covered as smoothly as possible. For example, the "hardened memory allocator", which by default is enabled on most apps, is by default DISabled for uber specifically because it is known to cause problems in that specific app. Basically, dive into the details if you want, but if you don't/can't, Graphene still had you covered.

OK, last cool thing I'll mention; distress pins. In the US, they cannot force you to divulge your pin #, but they CAN force you to use your biometric lock. Same goes for criminals; just grab your hand and they're in. BUT...GrapheneOS has a "lockdown mode" you can quickly access by holding down the power button, which temporarily disables biometric login. This is not unique to Graphene so check it out on your current device. What IS unique though is that Graphene also allows you to set a "distress pin" which wipes the phone back to factory settings. So...I use biometric day-to-day, but if I see trouble coming, I can quickly (2 secs) put the phone in lockdown which will require my solidly unbackable 16-digit pin. If it gets real bad, I can reveal my 4-digit distress pin and my phone will be wiped. When I get it back, I can just restore it with my backup.

There's the only current downside I've found thus far. Automatic backups require you to load ti a google account. However, you can also backup to a flash drive, and they might tackle that thorny issue with the new Motorola.

That's the broad strokes; go check it out yourself and spread the word so we don't slip further into fascist oligarchies.✊ As a reminder, GrapheneOS is legit non-profit; this is NOT some weird alternative scam.