-
I use the standard Google build on a Google Pixel 2 and run NetGuard set to whitelist mode... meaning that all traffic from the device is by default blocked... and then I whitelist only TLS secured traffic (typically HTTPS on port 443) to same vendor domains (same vendor as the app).
The only exceptions are that I actually trust Google so I whitelist them (I don't have a Gmail account and my Google Apps is down as a health company white means I get privacy as if my email was that of a medical doctor), and I trust browsers (when I'm choosing to visit web sites).
For browsers, I use Firefox Focus for anything I think likely is toxically bad, Brave for anything I half trust but am likely visiting once, Firefox for things I trust and am visiting more than once, and Chrome for anything Google plus LFGSS.
Basically: I filter my traffic, compartmentalise my browsing.
Oh, and if NetGuard alerts me that something is trying to access data in the background (when I haven't whitelisted)... those apps are getting notifications disabled as well as background processing disabled.
Velocio
@salmonchild
@Velocio
Did you recently do some posts on securing Android traffic? Just switched from iOS and want to lock this thing down before I import personal data.