How to maintain freedom and privacy using technology and Internet
Some simple rules to remember in order not to be overwhelmed |
“Arguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say. It's a deeply anti-social principal because rights are not just individual - they're collective. The fact that you don't care about this or that freedom today doesn't mean you can't care about it tomorrow. What today may not have value for you, tomorrow may have value for an entire population, an entire people, an entire way of life. And if you don't stand up for it, then who will?” Edward Snowden, 2015
“When you say, ‘I have nothing to hide,’ you’re saying, ‘I don’t care about this right.’ You’re saying, ‘I don’t have this right, because I’ve got to the point where I have to justify it.’ The way rights work is, the government has to justify its intrusion into your rights.” Edward Snowden, 2015
“A person's true value is not measured by the values he claims to uphold, but by what he is willing to do to protect them. If you don't hold true to the values you believe in, you probably don't believe in them all the way.” Edward Snowden, 2015
“Privacy is not for sale, and human rights should not be compromised out of fear or greed.” Pavel Durov, 2018
“Every one of us is going to die eventually, but we as a species will stick around for a while. That’s why I think accumulating money, fame or power is irrelevant. Serving humanity is the only thing that really matters in the long run.” Pavel Durov, 2018
“Surveillance is the business model of the Internet.” Bruce Schneier, 2014
“Too many wrongly characterize the debate as security versus privacy. The real choice is liberty versus control.” Bruce Schneier, 2009
“The real psychological truth is this: if you’ve got nothing to hide, you are nothing.” Shoshana Zuboff, 2014
“Will we be the masters of information, or will we be its slaves? If the digital future is to be our home, then it is we who must make it so.” Shoshana Zuboff, 2014
“In a world where software influences virtually every single aspect of our lives, Free Software is a precondition for a free society.” Reinhard Müller, 2019
“Anytime someone puts a lock on something you own, against your wishes, and doesn't give you the key, they're not doing it for your benefit.” Doctorow's Law, 2009
“It's the actions that matter. Our thoughts, good as they may be, are false pearls until they are transformed into actions. Be the change you want to see in the world.” Mahatma Gandhi, unknown
"The Web is designed to be universal: to include everything and everyone." Tim Berners-Lee, 2007
"We need to start talking about the right to access the Web and the right not to be spied on. The Internet must remain free, open and neutral." Tim Berners-Lee, 2011
“If one would give me six lines written by the hand of the most honest man, I would find something in them to have him hanged.” Cardinal Richelieu, 1641
“If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place, but if you really need that kind of privacy, the reality is that search engines including Google do retain this information for some time, and it's important, for example that we are all subject in the United States to the Patriot Act. It is possible that that information could be made available to the authorities.” Eric Schmidt, 2009
“The technology will be so good it will be very hard for people to watch or consume something that has not in some sense been tailored for them.” Eric Schmidt, 2010
“A squirrel dying in front of your house maybe more relevant to your interests right know than people dying in Africa.” Mark Zuckerberg, 2011
“It’s the gradual, slight, imperceptible change in your own behaviour and perception that is the product...That's the only thing there is for them to make money from. Changing what you do, how you think, who you are.” Jaron Lanier, 2020
“A world constructed from the familiar is a world in which there's nothing to learn...(since there is) invisible autopropaganda, indoctrinating us with our own ideas.” Eli Pariser, 2011
“Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety.” Benjamin Franklin, 1755
Modern society is called the information society because technology and the Internet are used pervasively. These means are used for the dissemination of information and content for any purpose (popular, recreational, commercial, etc.). The most important thing is to be aware that our freedom as people is at risk in ways that are sometimes difficult to understand.
Government agencies continuously spy on us in the name of security through global surveillance programs (PRISM, Echelon, XKeyscore, Vault 7, Tempora, Cambdrige Analytica, Net Neutrality, TED with subtitles, TED with subtitles).
Service providers, in exchange for more or less useful free services, consider us as products for their own interests. The forms of abuse range from tracking user habits (TED with subtitles, digital merchandise fetishism and hidden exploitation) to not owning a good (application, film or disc) despite its purchase (DRM).
In order to be able to defend itself, a free solution is to use open source software better if free or designed to maintain the freedom of users. Open source software encourages the analysis and study of the source code in order to make corrections, changes and extensions. Free software adds to open source software respect for the freedom of users and the community; users have the freedom to run, copy, distribute, study, modify and improve the software. So it's a question of freedom, not price. To understand the concept, one need to think of "freedom of speech" and not "free beer".
The Free Software Foundation promotes the development and dissemination of free software through the General Public License (GPL). Free and open source software allows the revision of the source code by a large number of people. For this reason, it is more difficult for it to contain defects and malfunctions (bugs) or security holes and corrections are very quick. Moreover, since the source code is freely available, it is very difficult to intentionally insert spy functions (backdoors, trojans and spyware) without these being promptly discovered and eliminated differently from what happened for some commercial applications.
Furthermore, messages defined as "private" in e-mail services, social networks and communication applications are actually not. In most cases, messages are transmitted over the Internet and protected by encryption, but are readable by the service provider. To communicate in a truly private way through a digital device, different solutions based on end-to-end encryption are needed.
An unencrypted message is the same as a postcard while an encrypted message is the same as a traditional letter: in particular, end-to-end encryption ensures that only the recipient can open the envelope of the letter.
Finally, Term of Service (ToS) are the legal agreements between a service provider and the user who wishes to use them. In particular, they define the terms of use of a service in a legally binding manner and are essential for the protection of copyright on content and for protection against potential liability. The terms of service, due to their length and sometimes difficult to understand, are almost never read by the user who unconsciously accepts them.
1.Proprietary software (closed source) protects the rights and the interests of the developer rather than the users;
2.Free software guarantees transparency and freedom to users and is a necessary condition for a free society;
3.A software that uses end-to-end encryption protects you from the collection of personal data and surveillance of mass media;
4.A free service/product or an unclear business model gains through user data or their lives;
5.It is better to pay for a service/product with a subscription or donation and be certain of its genuineness than to have it for free without any certainty.
According to the inventor of the World Wide Web (WWW), Tim Berners-Lee, the priorities to keep open and free Internet are the following:
1.Resume control of our personal data;
2.Limit and, if possible, remove the spread of misinformation on the Web;
3.Create tools for transparency and understanding of online political advertising.
What information are large technology companies collecting from us?
How the Tech Giants Make Their Billions
The question: it is possible to abandon Google (GAFAM and FAANG) and remain in the world of today without falling from the frying pan to the fire?
It's not easy because "BigG" is no longer just a search engine. In fact, BigG provides a series of services (video and document sharing, maps, email, mobile operating systems, etc.) very useful, if not indispensable, in everyday life.
•The reasons: why complicate your life using N different applications and services instead of just one very functional?
◦Privacy. BigG sees everything you do and has been memorizing it for years. Lately, the combination of different services (in particular, Google Search, YouTube, Maps and Android) is creating a very worrying concentration of user data;
◦The ecosystem. Both technological and biological diversity is a source of wealth. Google in Europe manages 90% of online searches and 70% of advertising both growing and is shifting the network centre of gravity;
◦Knowledge. BigG is phenomenal, but it is frightening that most people see the net (the world) always through the same glasses (TED with subtitles, Filter Bubble, News).
•The problem: how to live without BigG without going back to the primordial era of the Internet? Why is it necessary to do so if its services are of high quality?
BigG has become too invasive. Also, unlike its competitors, its purpose is to sell advertising. It is not a search engine (like Yahoo), it is not a software manufacturer (like Microsoft, Adobe, Oracle, IBM, etc.), it does not live by selling licenses (like Microsoft, Adobe, Oracle, IBM, etc.) or devices (Apple, HP, Lenovo, etc.) or services (excluding some services to companies and individuals).
Its fundamental profit comes from advertising and from this derives the total profiling of its users. Its control is so pervasive that BigG can now be considered a quasi-monopolist (duopoly with Facebook) of Internet advertising.
There is no need to demonise Google, as this is its business model: the services offered are excellent in exchange for the massive collection of personal data. The final choice depends on ourselves. Unfortunately, some facts are very puzzling (for example, any data uploaded to its servers becomes its property or it is allowed to do whatever you want with our profiles, including selling them to third parties).
Everyone can evaluate their privacy as they wish and decide whether the transfer of much personal information is worth the level of services that are obtained in return from BigG (GAFAM and FAANG).
A few key points:
•Considering the number of BigG services, migrating from them means spending a considerable amount of time, therefore indirectly money, and limiting comfort at least initially. In fact, it is necessary to learn new concepts and renounce the integration of all services;
•BigG is no longer just a search engine and for this reason a brief overview of the most used services is given below.
How to live without BigG's services and applications | ||
Service or application |
|
Alternatives |
Bookmarks | ||
Services and applications Earth visualization | ||
Services and applications Street Map | ||
Apertium, LibreTranslate, LingvaTranslate, DeepL, Linguee, Swisscows | ||
| ||
Invidious, PeerTube, DTube, NewPipe, FreeTube, Internet Archive | ||
Teclados Android | ||
Activity tracker | ||
Media center | ||
Music | ||
Books | ||
News and Events | ||
Payments | ||
Web sites | ||
Alerts | ||
Photography | ||
Advertising for advertisers | ||
Advertising for publishers | ||
Analytic | ||
Domains |
Note: the list is not complete, but it allows you to understand how many BigG services it uses to profile its users. The Android operating system has allowed BigG to extend its user base in a viral way. Unfortunately, without awareness and the correct countermeasures such as those in this document, using an Android device makes it a prisoner of BigG's services.
The best solution is to buy a device (smartphone or tablet), even used, compatible with a free operating system, based on the Android Open Source Project (AOSP), such as Lineage OS. In addition to allowing greater customization, performance (speed and battery life) and privacy, it allows you to receive operating system updates throughout the life of the device.
Note: the installation of Lineage OS, although not difficult, requires a minimum of computer knowledge; however, it is possible to learn this procedure through a lot of information and videos present on the net source and source.
Browser | |||||||||
Feature |
Project | ||||||||
Developer |
|
Microsoft |
Apple |
Opera |
|
Mozilla |
Brave |
TOR project | |
No |
No |
No |
No |
Yes |
Yes |
Yes |
Yes | ||
Blink |
Blink |
Web kit, Nitro |
Blink |
Blink |
Gecko, Servo |
Blink |
Gecko, Servo | ||
Performance |
High |
High |
Average |
High |
High |
High |
High |
High | |
High |
Average |
Average |
Average |
High |
Average |
Average |
Average | ||
Additional components |
Desktop version only |
Desktop version only |
Desktop and iOS version |
Desktop version only |
Desktop version only |
Desktop and Android version |
Desktop version only |
Desktop and Android version | |
Integrated advertising filter |
No |
No |
Yes |
Yes, via NoScript | |||||
No |
No |
Yes |
Yes |
Yes, via NoScript | |||||
No |
No |
No | |||||||
Default safe connection (HTTPS) |
Yes, default disabled |
Yes | |||||||
User data, advertising |
User data, advertising |
User data, advertising |
User data, advertising |
|
Donations, agreement with search engines |
BAT cryptocurrency |
Donations |
To make browsing safer and more confidential, you must use one of the following browsers:
•Brave is a new browser based on Chromium that revolutionizes the concept of browsing by automatically eliminating advertising and user tracking in favor of privacy. It also integrates a digital content management platform based on the Basic Attention Token (BAT) crypto currency. A very good guide on how to operate Brave and BAT;
•Firefox the open source and free browser managed by the Mozilla foundation, which deals with the respect of the rights and user privacy;
•The Onion Router (TOR) is a browser, based on Firefox, to surf the Web anonymously and fight censorship. TOR uses a series of alternative routes to increase safety at the expense of browsing speed;
•WebApps is an open source Android application available on F-Droid for securely browsing common WebApps (Google, Facebook, Twitter, etc.) while eliminating referrers, third-party requests, cookies and tracking.
Note: Chrome is the closed source version and owner of Chromium and is therefore considered not to be respectful of privacy. Google's business model, based on advertising, requires user data as payment for services.
Does your browser protect you against fingerprinting?
Firefox, Brave or Chrome: some very useful add ons to increase the browsing safety and privacy:
•HTTPSeverywhere forces the use of the HTTPS protocol and encrypts all connections that support it for the sake of safety of browsing (recommended);
•CookiesAutodelete automatically deletes the source tracking cookies of users in favor of the privacy of browsing (recommended);
•Ublock origin blocks advertising, a malware carrier, to the benefit of browsing speed and significant savings in data and battery traffic as well as greater privacy and security of browsing (recommended);
•LocalCDN is an updated fork of DecentralEyes that limits requests to Content Delivery Network (CDN) in favor of the privacy of browsing (recommended);
•ClearURL automatically removes tracking elements from URLs in favor of privacy (recommended);
•Privacy Redirect allows to redirect YouTube, Instagram, Twitter, Google Maps, Reddit and Google Search requests to their open source advertising-free and privacy-friendly alternative interfaces Invidious, Bibliogram, Nitter, OpenStreetMap, Libredd and Searx or Presearch (recommended);
•Terms of Service; Didn’t Read provides a score to each Web site based on its terms of service and privacy policy. Analyses and assessments are published in a transparent manner by the community;
•PrivacySpy is an open project to evaluate, annotate and archive privacy policies (recommended);
•I still don't care about cookies removes cookie alerts from almost all websites, saving you time while browsing. The component is useful when browsing anonymously or automatically deleting cookies (CookiesAutodelete);
•Disable WebRTC (Firefox) and WebRTC Leak Prevent (Brave and Chrome) disables the WebRTC communication protocol that can detect the IP address despite the use of a VPN. It greatly improves privacy of browsing;
•Privacy Badger prevents third-party advertisers and trackers from tracking browsing in favor privacy;
•Privacy Possum reduces and falsifies the data collected by tracking companies on browsing making it less profitable and promoting the privacy of browsing.
Firefox: additional add ons very useful to increase the privacy of browsing:
•Firefox Multi Account Containers allow you to confine the cookies of Web sites in different containers by eliminating the tracking of trackers on the Web (Facebook Container isolates Facebook and Instagram, Google Container isolates Google Search, YouTube and its services). In addition, the isolation of the containers allows you to have multiple identities and access with different users to the same Web site. It greatly improves the privacy of browsing (recommended);
•Canvas Blocker allows users to prevent Web sites from using certain JavaScript APIs to take fingerprints (fingerprint1, fingerprint2). Users may choose to block entirely (risky, may cause some Web sites to malfunction) or falsify the API for fingerprint reading. It greatly improves the privacy of browsing (recommended);
•Integrated page translator automatically translates Web pages in real time using Google or Yandex. In the future it should also support other translators such as DeepL Translator services and applications.
Note: xBrowserSync allows you to synchronize bookmarks between browsers and devices with end-to-end encryption and without registration.
Note: only Firefox and Kiwi on Android version support add ons, Chrome does not support them.
Search engine | |||||||||
Feature |
Project | ||||||||
Developer |
|
Microsoft |
Startpage |
Qwant |
DuckDuckGo |
Brave |
Presearch |
Community | |
No |
No |
No |
Partially |
No |
No |
Partially |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Decentralized |
Decentralized | |
Infrastructure jurisdiction |
USA |
USA |
Europe, USA |
Europe (France) |
USA |
USA |
World |
World | |
Quality results |
High |
High |
High (Google) |
High (Bing) |
High |
High |
High (Google, DuckDuckGo) |
High (Google, Bing, Yahoo) | |
Independent search index |
Yes |
Yes |
No |
No |
No |
Yes |
Yes |
No | |
Integrated advertising filter |
No |
No |
No |
No |
No |
No |
No |
Yes | |
No |
No |
Yes |
Yes |
Yes |
Yes |
No |
Yes | ||
Safe connection (HTTPS by defect) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
User data, advertising |
User data, advertising |
Advertising, donations |
Advertising, donations |
Advertising, donations |
BAT cryptocurrency |
Presearch cryptocurrency |
Donations, public servers | ||
Advertising, tracking and profiling |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
The following search engines are respectful of user privacy and provide innovative features:
•Ecosia is a proxy search engine that uses Bing search engine results. Its characteristic is to donate 80% of advertising revenue to support reforestation programs;
•Givero is a proxy search engine that uses Bing search engine results. Its characteristic is to donate 80% of advertising revenue to support good causes;
•Searx is a meta search engine that uses the searches of the most used search engines Google, Bing, etc.. Its characteristic is to not track the user browsing, to be completely open source and to allow anyone to install a public server (decentralized);
•Presearch is an independent search engine and allows to uses the searches of various search engines including Google and DuckDuckGo. The project aims to create a decentralized search engine where users are rewarded with the Presearch cryptocurrency for the usage, contribution and promotion of the platform;
•Brave search is a private, independent and user-friendly search engine. Its characteristic is that it is one of the few real alternatives to Google Search and Bing;
•DuckDuckGo is an alternative search engine to the most used search engines Google, Bing, etc.. Its characteristic is to not track the user browsing;
•Startpage is a proxy search engine that uses Google Search engine results. Its characteristic is to be oriented to the user privacy;
•Qwant is a proxy search engine that uses Bing search engine results. Its characteristic is that it does not track the user browsing and that it has the servers legal location in Europe;
Note: Google, Bing and Yahoo (Bing) have a business model based on advertising and requires user data as payment for services.
Advertising filter additional components and applications | |||||||
Feature |
Project | ||||||
Developer |
Community |
Eyeo |
AdGuard |
Community |
Community |
Community | |
Yes |
Yes |
Partially |
Yes |
Yes |
Yes | ||
High/High |
High/High |
Low/Low |
Low/Low |
Low/Low |
Low/Low | ||
Android/iOS/browser |
No/No/Yes (Firefox, Brave, Chrome, Edge, Safari) |
No/No/Yes (Firefox, Brave, Chrome, Edge, Safari) |
Yes/Yes/Yes (Firefox, Brave, Chrome, Edge, Safari) |
No/No/Yes (Firefox, Brave, Chrome, Edge, Safari) |
Yes/Yes/No |
Does not require installation on the device, only Raspberry Pi | |
Performance |
Average |
Average |
High |
High |
High |
Average | |
Yes |
Yes |
Yes, optional |
No |
No |
No | ||
Requires to establish VPN connection |
No |
No |
Yes, local connection |
No |
Yes, local connection |
No | |
Browser/operating system protection type |
Yes/No |
Yes/No |
Yes/Yes |
Yes/No |
No/Yes |
No/No, entire local network | |
Required root user |
No |
No |
No |
No |
No |
No | |
Download Android/iOS/PC |
No/No/Web site |
No/No/Web site |
No/No/Web site |
Web site | |||
Paid features |
Advertising |
Paid features |
Donations |
Donations |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes, minimal |
No |
No |
No |
Some open source applications for Android, availables only on F-Droid, which allow you to block advertising:
•DNS66: does not need to activate the root of the device and allows you to edit the DNS;
•Yet Another Call Blocker blocks unwanted calls using a database of offline phone numbers without the need to share your contacts.
The main advantages of using an advertising filter:
•Ads blocking (including YouTube video and Facebook text), pop-ups and banners;
•Increased browsing speed, reduced data traffic and battery saving;
Note: browsing on a PC is via a browser which uses the add ons as an advertising filter. On the other hand, browsing on Android and iOS is done through applications that require an advertising filter at the operating system level provided by a specific application.
Communication applications (messaging and VoIP) | ||||||||||||
Feature |
Project | |||||||||||
Developer |
|
|
Apple |
Microsoft |
Rakuten |
Telegram |
Mega |
Zoom |
Signal |
Wire |
Element | |
No |
No |
No |
No |
No |
Partially |
Partially |
Partially |
Yes |
Yes |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized/decentralized |
Decentralized/centralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
USA |
Luxembourg/Japan |
Netherlands/USA/Singapore |
New Zealand |
USA |
USA |
Switzerland/local |
Local/UK | |
Bonds intelligence agencies |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
No | |
Web/Android/iOS/PC |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/No |
No/No/Yes/Yes, macOS only |
Yes/Yes/Yes/Yes |
No/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/No |
Yes/Yes/Yes/Yes |
No/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes | |
Users (active/group size) |
2000 M/1024 |
1300 M/250 |
1000 M/32 |
300 M/600 |
260 M/250 |
700 M/200 k |
200 M/500 |
1 M/10 k |
40 M/1000 |
30 M/500 |
40 M/10 k | |
Size (attachments/storage) |
2 GB/unlimited (local storage) |
25 MB/ unlimited (cloud storage) |
100 MB/unlimited (local storage) |
300 MB/unlimited (local storage) |
200 MB/unlimited (local storage) |
2 GB, paid version 4 GB/unlimited (cloud storage) |
Unlimited/15 GB, paid version up to 16 TB (cloud storage) |
Unlimited/250 GB (cloud storage) |
100 MB/unlimited (local storage) |
100 MB/unlimited (local storage) |
100 MB/unlimited (cloud storage) | |
Safe attachments/self-destructing messages |
No/No |
No/Yes |
No/No |
No/No |
No/Yes |
No/Yes |
Yes/No |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/No | |
Cloud/local backup support |
Yes, third parties in clear text/Yes |
Yes, clear text/Yes, export |
Yes, clear text/No |
Yes, clear text/Yes, export |
Yes, clear text/Yes, export |
Yes, clear text/Yes, export |
Yes, E2E encryption/No |
Yes, E2E encryption/No |
No/Yes |
No/Yes |
Yes, E2E encryption/No | |
Anonymous registration/username |
No/No |
Yes, email/Yes |
Yes, email/Yes |
Yes, email/Yes |
No/No |
No/Yes |
Yes, email/Yes |
Yes/Yes |
No/No |
Yes, email/Yes |
Yes/Yes | |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
No |
No |
Yes |
No | ||
E2E encryption chat-call/group/conference |
Yes/No/No |
Yes, secret conversations/No/No |
Yes/Yes/Yes |
Yes/No/No |
Yes/No/No |
No, secret chats only/No/No |
Yes/Yes/Yes |
Yes/Yes/Not available |
Yes/Yes/Yes |
Yes/Yes/Yes |
Yes/Yes, private groups/Yes, private groups | |
Yes |
No |
Yes |
Yes |
Yes |
No, secret chats only |
Yes |
No |
Yes |
Yes |
Yes, only the first device | ||
Yes |
Yes, secret conversations only |
No |
No |
Yes |
Yes, secret chats only |
Yes |
Yes, self-destructing messages only |
Yes |
Yes |
Yes | ||
Server federation |
No |
No |
No |
No |
No |
No |
No |
No |
No |
Yes, paid version |
Yes | |
User data, advertising |
User data, advertising |
User data |
User data, advertising |
User data, advertising |
Paid features, advertising |
User data, paid features |
User data, paid features |
Donations |
Paid features |
Paid features | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
•Keybase is an open source and multi platform application that offers chat with end-to-end encryption not TOFU and public and private cloud storage (end-to-end encryption). It also offers a publicly verifiable service for managing encryption keys that can be associated with social network identities.
•Session is an open source and multi platform application that offers chat with end-to-end encryption not TOFU and allows anonymous registration and communication. In particular, Session uses a decentralized TOR-like network designed against censorship.
•Jami is an open source and multi platform application that offers chat, video calling and video conferencing with end-to-end encryption not TOFU and enables registration and communication. In addition, Jami is fully decentralized peer-to-peer.
•Briar is an open source application for Android that offers chat and forums with end-to-end encryption TOFU and allows for registration and anonymous communication via Bluetooth, WiFi and the TOR network.
•Ferdi is an open source, multi platform application (GNU/Linux, Windows, macOS) that allows you to use the most popular communication and e-mail applications. Ferdi is the free version of Franz.
•Rambox is a free, open source (Community Edition version) and multi platform application (GNU/Linux, Windows, macOS) that allows you to use the most popular communication and e-mail applications.
•Librem.one is a collection of open source services that use encryption to protect your privacy and communicate securely with others:
◦Librem Chat is a communication service protected by end-to-end encryption based on Matrix similar to Element.
Note: a good comparison in term of security and privacy features of the most commonly used communication services or applications.
Video conferencing applications | |||||||||||
Feature |
Project | ||||||||||
Developer |
|
|
Microsoft |
Zoom |
Telegram |
Mega |
Wire |
NextCloud |
BigBlueButton |
Community/8x8 | |
No |
No |
No |
No |
Partially |
Partially |
Yes |
Yes |
Yes |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized/decentralized |
Decentralized/centralized |
Decentralized/centralized |
Decentralized/centralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
USA |
Netherlands/USA/Singapore |
New Zealand |
Switzerland/local |
Local/service provider server venue |
Local/service provider server venue |
Local/service provider server venue | |
Web/Android/iOS/PC |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/No |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/No |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/No/No/No |
Yes/Yes/Yes/Yes | |
Maximum users (conference/chat) |
50/250 |
Hangouts 25/25 Meet 100/100 conference only 60 minutes, 500/100000 paid version only |
Skype 50/50 Teams 100/100 conference only 60 minutes, 300/20000 paid version only |
100/100 conference only 40 minutes, 1000/1000 paid version only |
2000/200000 |
20/500 |
25/25, 100/500 paid version only |
Local installation 10/100 High performance installation 50/500 |
150/150 |
500/500 | |
Video codec support |
VP8 |
VP8/VP9 |
H.264 |
H.264 |
VP8/VP9 |
VP8/VP9 |
VP8 |
VP8/VP9 |
VP8/H.264 |
VP8/VP9/H.264 | |
Audio codec support |
Opus/ISAC |
Opus |
Skype SILK Teams Satin/SILK |
Opus/SILK |
Opus |
Opus |
Opus |
Opus |
Opus |
Opus | |
Camera-Screen/Audio sharing |
1/No |
Hangouts/Meet 1/Yes, PC only |
Skype/Teams 2/Yes, PC only |
2/Yes, PC only |
2/Yes |
1/No |
1/No |
1/No |
2/Yes, PC only |
1/Yes, PC only | |
Application integration |
No |
Skype No Teams Yes, Microsoft office and other paid version |
Yes, Moodle and other |
No |
Yes, Mega cloud |
Yes, paid version |
Yes, NextCloud | ||||
E2E encryption conference/chat |
No/No |
No/No |
No/No |
Yes/Yes, optional |
No/No, secret chats only |
Yes/Yes |
Yes/Yes |
Yes/Yes |
No/No |
Yes/Yes | |
Yes |
Yes |
Skype Yes Teams No, paid version only |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
No, user not necessary | ||
Anonymous registration /username |
Yes, email/Yes |
Yes, email/Yes |
Yes, email/Yes |
Yes, email/Yes |
No/Yes |
Yes, email/Yes |
Yes, email/Yes |
Yes, email/Yes |
Yes/Yes |
Yes/Yes | |
No |
No |
No |
No |
No |
No |
Yes, paid version |
No |
Yes |
Yes | ||
User data, advertising |
User data, advertising, padi features |
User data, advertising, padi features |
User data, advertising, padi features |
Paid features, advertising |
User data, paid features |
Paid features |
Paid features |
Donations |
Paid features | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
•Jami is an open source and multi platform application that offers chat, video calling and video conferencing with end-to-end encryption not TOFU and enables registration and communication. In addition, Jami is fully decentralized peer-to-peer.
•Element is an open source and multi platform service that offers chat, video call and video conference through the Jitsi project. Element supports end-to-end encryption TOFU, anonymous registration and server federation.
•Edu meet is an open source and multi platform service that offers video conferencing, chat and file sharing through the browser without the need for any registration. The service supports up to 200 users per conference, VP8/VP9 video codecs and Opus audio codec.
Email services and applications | ||||||||
Feature |
Project | |||||||
Developer |
|
Microsoft |
Mailfence |
Community |
Tutanota |
Proton |
Community | |
No |
No |
No |
Yes |
Partially |
Partially |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized/decentralized |
Centralized |
Centralized |
Decentralized | |
Infrastructure jurisdiction |
USA |
USA |
Belgium |
Service provider server venue |
Germany |
Switzerland |
Local | |
Anonymous payment method |
No |
No |
Paid, Bitcoin, email required |
Donations and paid, Bitcoin, email required |
Donations and paid, Bitcoin, email required |
Bitcoin, cash, email required |
Not necessary | |
E-mail application support |
Yes |
Yes |
No |
No |
No |
Yes, via Proton Bridge paid version |
No | |
Size (attachments/mailbox) |
25 MB/15 GB |
20 MB/15 GB |
50 MB/0.5 GB, 5 GB paid version |
Service provider limits |
25 MB/1 GB, 1000 GB paid version |
20 MB/1 GB, 500 GB paid version |
Unlimited (local storage) | |
Safe attachments/self-destructing messages |
No/ |
No/No |
No/No |
Yes/Yes, depends on the service provider |
Yes/Yes |
Yes/Yes |
Yes/No | |
No |
No |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Yes |
Yes |
Yes |
Yes, depends on the service provider |
Yes |
Yes |
Not necessary | ||
User data, advertising |
User data, advertising |
Paid features |
Donations, paid features |
Paid features |
Paid features |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
No |
No |
No |
No |
No |
The following e-mail services are respectful of user privacy and some of them provide innovative features:
•Proton Mail is an e-mail service founded at CERN in 2014. Proton Mail uses end-to-end encryption to protect messages before sending them to servers unlike other email providers. Protomail also supports the TOR network and offers additional services for paid version.
•Tutanota is a fully open source email service founded in 2011 that uses end-to-end encryption to protect messages before sending them to servers unlike other email providers. Tutanota is financed only through donations and premium subscriptions, i.e. without advertising.
•Disroot provides an email service, cloud and various online collaboration tools with encryption. Disroot uses server-side encryption, so the user does not have the encryption keys. However, it remains a better solution than traditional providers.
Note: Gmail, Outlook have a business model based on advertising and require user data as payment for services. In addition, messages can be read by service providers as the encryption keys are saved on the server. A simple way to secure these services is to use a browser like Firefox with the Mailvelope add on or an email client like Thunderbird. Both solutions add end-to-end encryption and make message content unreadable to service providers.
Multi user email applications | ||||||||
Feature |
Project | |||||||
Developer |
|
Microsoft |
Yahoo |
BlueMail |
Community |
Mozilla |
Community | |
No |
No |
No |
No |
Yes |
Yes |
Yes | ||
Multi platform |
Android/iOS |
Android/iOS-Windows/macOS |
Android/iOS |
Android/iOS-Windows/macOS |
Android |
GNU/Linux/Windows/macOS |
GNU/Linux/Windows | |
Multi user support |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
Support for encryption/digital signatures |
No/No |
Yes/Yes |
No/No |
No/No |
Yes/Yes, via OpenKeychain |
Yes/Yes, via Enigmail |
Yes/Yes, via GNUPG | |
Yes/Yes/Yes |
Yes/Yes/Yes |
Yes/Yes/No |
Yes/Yes/Yes |
Yes/Yes/Yes |
Yes/Yes/Yes, via ExQuilla |
Yes/Yes/No | ||
Additional components |
No |
No |
No |
No |
Yes |
Yes |
Yes | |
User data, advertising |
User data, advertising |
User data, advertising |
Paid features |
Donations |
Donations |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
No |
No |
No |
No |
•Librem.one is a collection of open source services that use encryption to protect your privacy and communicate securely with others:
◦ Librem Mail is an email service with end-to-end encryption based on K9-mail and similar to Tutanota and Proton Mail.
Cloud storage and data sharing services and applications | |||||||||||
Feature |
Project | ||||||||||
Developer |
|
Microsoft |
Apple |
Dropbox |
Mega |
Cryptomator |
Proton |
NextCloud |
OwnCloud |
Community | |
No |
No |
No |
Partially |
Partially |
Yes |
Partially |
Yes |
Yes |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized/decentralized |
Centralized |
Decentralized/centralized |
Decentralized/centralized |
Decentralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
USA |
New Zealand |
Service provider server venue |
Switzerland |
Local/service provider server venue |
Local/service provider server venue |
Local | |
Web/Android/iOS/PC |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
No/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes, via Möbius Sync/Yes | |
Storage size |
15 GB/paid version up to 2 TB |
5 GB/paid version up to 1 TB |
5 GB/paid version up to 2 TB |
2 GB/paid version up to 5 TB |
20 GB/paid version up to 16 TB |
Service provider limits |
5 GB/paid version up to 500 GB |
Unlimited (local storage)/service provider limits |
Unlimited (local storage/service provider limits |
Unlimited (local storage) | |
Synchronisation/versioning |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Depends on the service provider |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes | |
No |
No |
Yes, optional |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
Yes, manual | ||
User data, advertising, paid features |
User data, advertising, paid features |
User data, advertising, paid features |
User data, advertising, paid features |
User data, paid features |
Donations |
Paid features |
Paid features |
Donations, paid features |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
•NextCloud providers contains a list of cloud service providers that use the NextCloud platform. A great service that offers 1 GB of free storage, enough to host contacts and calendar, is Woelkli.
File sharing services and applications | ||||||||
Feature |
Project | |||||||
Developer |
WeTransfer |
pCloud |
Estmob |
Infomaniak |
Disroot |
WebTorrent |
Community | |
No |
No |
No |
Yes |
Yes |
Yes |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Decentralized |
Decentralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
Switzerland |
Holland |
Local |
Local | |
Web/Android/iOS/PC |
Yes/No/No/No |
Yes/No/No/No |
Yes/Yes/Yes/Yes |
Yes/No/No/No |
Yes/No/No/No |
No/No/No/Yes |
No/No/No/Yes | |
File size |
2 GB/20 GB paid version |
5 GB |
10 GB/50 GB paid version |
50 GB |
2 GB |
Unlimited (local storage) |
Unlimited (local storage) | |
Sharing duration |
7 days/configurable paid version |
7 days |
Up to 48 hours/configurable paid version |
Up to 30 days |
Up to 30 days |
Unlimited |
Unlimited | |
Persistent connection required |
No |
No |
No |
No |
No |
Yes, during sharing |
Yes, during sharing | |
No, only paid version |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Secure connection protocol |
HTTPS/TLS |
HTTPS/TLS |
HTTPS/TLS |
HTTPS/TLS |
HTTPS/TLS |
WebRTC/TLS |
Onion routing network | |
User data, advertising, paid features |
User data, advertising, paid features |
Advertising, paid features |
Paid features |
Donations |
Donations |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
•Instant.io is an open source WebTorrent based file sharing service that requires no registration and allows you to transfer files of unlimited size for an unlimited time through your browser.
Secure connection services (VPN, TOR, I2P) | ||||||||
Feature |
Project | |||||||
Developer |
NordVPN |
ExpressVPN |
IVPN |
Mullvad |
Proton |
TOR project |
Community | |
No |
No |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Decentralized |
Decentralized | |
Infrastructure jurisdiction |
Panama |
British Virgin Inslands |
Gibraltar |
Sweden |
Switzerland |
World |
World | |
Number of devices |
Paid up to 6 |
Paid up to 3 |
Paid up to 7 |
Paid up to 5 |
1 gratis/paid up to 10 |
Unlimited |
Unlimited | |
Anonymous payment method |
Bitcoin, Ether, Ripple, email required |
Bitcoin, email required |
Bitcoin |
Bitcoin, BitcoinCash |
Bitcoin, cash, email required |
Free, Bitcoin, Monero, Ethereum, Litecoin donations |
Free, Bitcoin, Monero, Ethereum, Litecoin donations | |
No/No/No/No |
No/No/No/No |
No/No/No/No |
No/No/No/No |
No/No/No/No |
No/No/No/No |
No/No/No/No | ||
Traffic encryption |
AES256-ChaCha20 |
AES256 |
AES256-ChaCha20 |
AES256-ChaCha20 |
AES256-ChaCha20 |
AES256 |
AES256 | |
Secure connection protocol |
OpenVPN/IPSec-IKEv2/Wireguard |
OpenVPN/IPSec-IKEv2/Lightway |
OpenVPN/WireGuard |
OpenVPN/WireGuard |
OpenVPN/IPSec-IKEv2/Wireguard/Stealth |
Onion routing network |
Garlic routing network | |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
No/Yes |
No/Yes, DNS not used | ||
P2P traffic/unlimited bandwidth |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes, paid version |
Yes/Yes, low speed |
Yes/Yes, low speed | |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | ||
TOR/multi server encryption support |
Yes/Yes |
Yes/No |
No/Yes |
No/Yes |
Yes/Yes |
Yes/Yes, onion routing |
Yes/Yes, garlic routing | |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Malware and ads protection |
Yes |
No |
Yes |
Yes |
Yes |
No |
No | |
Encrypted/clear traffic split |
Yes |
Yes |
No |
Yes, except iOS |
Yes |
No |
No | |
No |
Yes |
No |
No |
Yes |
No |
No | ||
Paid features |
Paid features |
Paid features |
Paid features |
Paid features |
Donations |
Donations |
•Librem.one is a collection of open source services that use encryption to protect your privacy and communicate securely with others:
◦ Librem Tunnel is a VPN service with end-to-end encryption that uses OpenVPN.
Resolver services DNS | ||||||||
Feature |
Project | |||||||
Provider |
|
Cisco |
Cloudflare |
CleanBrowsing |
AdGuard |
ClearDNS |
Community | |
No |
No |
No |
No |
Yes |
No |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized/decentralized |
Centralized |
Centralized |
Centralized |
Decentralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
USA |
Cyprus |
Switzerland |
World | |
No |
No |
Yes |
Yes |
Yes |
Yes |
No | ||
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No | ||
No |
Yes |
No |
Yes |
Yes |
Yes |
Yes | ||
Yes |
No |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Alternative TLD |
No |
No |
.crypto, .zil |
No |
No |
No |
Yes | |
IPv4 address |
8.8.8.8 8.8.4.4 |
208.67.222.222 208.67.220.220 |
1.1.1.1 1.0.0.1 |
185.228.168.9 185.228.169.9 |
94.140.14.14 94.140.14.15 |
9.9.9.9 149.112.112.112 |
192.71.245.208 31.171.251.118 | |
Performance |
High |
High |
High |
High |
High |
High |
High | |
Content filter |
No |
Yes, optional (family) |
Yes, optional (adults, malware) |
Yes, optional (family, adults, malware) |
Yes, optional (family, adults) |
Yes, optional (malware) |
No | |
Anti-censorship |
No |
No |
Partial |
No |
No |
No |
Yes | |
No/Yes |
No/Yes |
No/Yes |
No/Minimum |
No/Minimum |
No/Minimum |
No/No | ||
Users data, paid features |
Users data, paid features |
Users data, paid features |
Paid features |
Paid features |
Donations |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
No |
No |
No |
No |
DNS protocols and operating systems compatibility | |||||||
Protocol | |||||||
No | |||||||
•Connection verification tool:
◦Loss of information during DNS requests→ use a public DNS from OpenNIC or Mullvad;
◦Disclosure of the IP address via WebRTC communication protocol → install disable WebRTC add on Firefox or ScriptSafe on Brave and Chrome;
◦BitTorrent connection data loss→install a torrent client like qBittorrent to perform the test.
•Edit DNS solvers:
◦Windows;
◦MacOS;
◦Ubuntu;
◦Android allows you to change only the DNS of the WiFi connection. To change the DNS for all WiFi/4G connections you need the Blokada or DNS66 application;
◦iOS allows you to change only the DNS of the WiFi connection. To change the DNS for all WiFi/4G connections you need the application Blokada o DNSCloak;
◦Router.
•nsupadte is a free and open source service that creates a dynamic DNS.
Note: a secure connection via VPN, automatically changes the DNS resolver.
Map services and applications | |||||||||
Feature |
Project | ||||||||
Developer |
|
Apple |
Microsoft |
Mail.ru |
|
Here |
Community |
Community | |
No |
No |
No |
Yes |
No |
No |
Yes |
Yes | ||
Web/Android/iOS/Tizen |
Yes/Yes/Yes/Yes |
No/No/Yes/No |
Yes/No/No/No |
Yes/Yes/Yes/No |
Yes/Yes/Yes/No |
Yes/Yes/Yes/Yes |
No/Yes/Yes/No | ||
Maps | |||||||||
Real time traffic |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes, via OsmAnd+ | |
Autovelox/Speed limits |
No/No |
No/Yes |
No/Yes |
No/No |
Yes/Yes |
No/No |
No/Yes |
No/Yes, via OsmAnd+ | |
3D maps |
Yes |
Yes |
Yes |
No |
Yes |
Yes |
No |
Yes, via Marble | |
Preloaded maps (offline) |
Yes, expiry 15 days |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
Points of interest |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
Route registration |
Yes |
No |
No |
No |
Yes |
No |
Yes |
No | |
Sharing and collaboration |
No |
No |
No |
No |
Yes |
No |
Yes |
Yes | |
Additional components |
No |
Yes |
No |
No |
No |
No |
Yes |
Yes, no third parts | |
Users data, advertising |
Users data, advertising |
Users data, advertising |
Users data, advertising, paid features |
Users data, paid features |
Users data, paid features |
Donations, paid features |
OSMF foundation, donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
No |
•GMaps WV is an open source Android application based on the maps of Google Maps.
•OrganicMaps is an open source Android and iOS application derived from Maps.me and based on OpenStreetMap open maps.
•Mapbox is an online map service available through open source applications for Android, iOS and Web. The service is based on OpenStreetMap open maps and NASA proprietary maps;
•Qwant maps is an open source online map service based on OpenStreetMap open maps.
•Magic Earth is an application for Android and iOS based on OpenStreetMap open maps.
•Untrackme is an open source Android application available on F-Droid to redirect requests from Google Maps to its open source advertising-free and privacy friendly alternative interface OpenStreetMap.
•Private Location is an open source Android application for setting and keeping your smartphone's location private. Private Location protects your privacy by avoiding sharing your location with applications that require it, but don't need it to work.
Translator services and applications | |||||
Feature |
Project | ||||
Developer |
|
Microsoft |
DeepL, Linguee |
Apertium | |
No |
No |
No |
| ||
Quality/quantity of languages |
High/High |
High/High |
Maximum/Low |
Average/Average | |
Dictionary |
|
|
| ||
Web/Android/iOS/PC |
Yes/Yes/Yes/No |
Yes/Yes/Yes/Yes, Windows only |
Yes/Yes, via DeepL/No/Yes, Windows and macOS only | ||
Additional components |
Firefox, Chrome integrated |
No | |||
Translation limit |
5000 characters, unlimited paid version |
5000 characters, unlimited paid version |
5000 characters, unlimited paid version |
No | |
Preloaded languages (offline) |
Yes |
Yes |
No |
Yes | |
Document translation |
Yes, format (.doc, .docx, .txt) |
Yes, format (.pptx) |
Yes, format (.docx, .pptx, .txt) |
Yes, format (.odt, .ods, .odp, .docx, .xlsx, .pptx, .txt) | |
Website translation |
Yes |
Yes |
No |
Yes | |
Translation of conversations |
Yes |
Yes |
No |
No | |
Confidential translation |
No |
No |
No, paid version only |
Yes | |
Advertising, users data, paid features |
Advertising, users data, paid features |
Users data, paid features |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
No |
•LibreTranslate is an open source self-hosted translation service that does not require third-party providers (Google, Microsoft, or Amazon).
•LingvaTranslate is an open source alternative interface to Google Translate that supports over a hundred of languages.
Calendar services and applications | ||||||||
Feature |
Project | |||||||
Developer |
|
Microsoft |
Microsoft |
Apple |
Mozilla |
Proton |
NextCloud | |
No |
No |
No |
No |
Yes |
Partially |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Decentralized/centralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
USA |
Service provider server venue |
Switzerland |
Local/service provider server venue | |
Web/Android/iOS/PC |
Yes/Yes/Yes/No |
No/Yes/Yes/Yes, Windows and macOS only |
Yes/Yes/Yes/Yes, Windows only |
Yes/No, via DAVx5 or Google calendar/Yes/Yes, Windows and macOS only |
No/No/No/Yes |
Yes/Yes/Yes/No | ||
Reminders/notifications support |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes | |
Third-party calendars support |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes | |
Yes/Yes |
Yes/Yes, via CalDavSynchronizer |
No/No |
Yes/Yes |
Yes/Yes, via Lightning Calendar |
Yes/Yes, via Proton Bridge paid feature |
Yes/Yes | ||
Advertising, users data, paid features |
Advertising, users data, paid features |
Advertising, users data, paid features |
Advertising, users data |
Donations |
Paid features |
Paid features | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
•Tutanota is an email service that integrates a calendar with end-to-end encryption.
•DAVx5 is an open source Android application for synchronizing contacts, calendar and tasks. It supports CalDAV/CardDAV protocols and allows you to keep your data locally or in a private cloud such as NextCloud.
•Etar is an open source Android application to manage your calendar compatible with DAVx5;Tasks is an open source Android application to manage your commitments compatible with DAVx5.
•Tasks is an open source Android application to manage your commitments compatible with DAVx5.
•Woelkli is a cloud service based on NextCloud located in Switzerland that offers CalDAV/CardDAV functionality and 1 GB of free storage (additional storage and features for paid version). Using this service together with DAVx5, Etar, Tasks and Android's native contact application, you can use the calendar, manage your tasks and contacts without saving any data on your Google account.
Contacts services and applications | ||||||||
Feature |
Project | |||||||
Developer |
|
Microsoft |
Microsoft |
Apple |
Mozilla |
Proton |
NextCloud | |
No |
No |
No |
No |
Yes |
Partially |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Decentralized/centralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
USA |
Service provider server venue |
Switzerland |
Local/service provider server venue | |
Web/Android/iOS/PC |
Yes/Yes/Yes/No |
No/Yes/Yes/Yes, Windows and macOS only |
Yes/Yes/Yes/Yes, Windows only |
Yes/Yes, via Sync iCloud/Yes/Yes, Windows and macOS only |
No/No/No/Yes |
Yes/Yes/Yes/No |
Yes/Yes, via DAVx5 and native application/Yes, via native application/Yes | |
Categories/groups support |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes | |
Duplicates merge support |
Yes |
Yes |
Yes |
Yes |
Yes, native and via |
Yes |
Yes | |
Import/export formats (.csv, .vcf) support |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
No/Yes | |
Yes/Yes |
Yes/Yes, via OpenProtocolsConnector |
No/No |
Yes/Yes |
Yes/Yes, via CardBook |
Yes/Yes, via Proton Bridge paid feature |
Yes/Yes | ||
Advertising, users data, paid features |
Advertising, users data, paid features |
Advertising, users data, paid features |
Advertising, users data |
Donations |
Paid features |
Paid features | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
•DAVx5 is an open source Android application for synchronizing contacts, calendar and tasks. It supports CalDAV/CardDAV protocols and allows you to keep your data locally or in a private cloud such as NextCloud.
•Woelkli is a cloud service based on NextCloud located in Switzerland that offers CalDAV/CardDAV functionality and 1 GB of free storage (additional storage and features for paid version). Using this service together with DAVx5, Etar, Tasks and Android's native contact application, you can use the calendar, manage your tasks and contacts without saving any data on your Google account.
•OpenContacts is an open source Android application to keep your contacts separate from those managed by the default application. OpenContacts prevents other applications from accessing and copying your contacts and greatly improves privacy.
•Fake Contacts is an open source Android application available on F-Droid to create fake phone contacts that are stored together with real phone contacts. This provides false data to all applications that copy phone contacts to use or sell them. Of course, the operation of the application does not interfere with the normal use of the phone or the real phone contacts.
Digital notepad services and applications | ||||||||
Feature |
Project | |||||||
Developer |
|
Microsoft |
Apple |
Evernote |
Disroot |
Community |
Standard Notes | |
No |
No |
No |
No |
Yes |
Yes |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Centralized |
Decentralized/centralized |
Decentralized/centralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
USA |
Holland |
Local/backup service venue |
Local/backup service venue | |
Web/Android/iOS/PC |
Yes/Yes/Yes/No |
Yes/Yes/Yes/Yes, only Windows |
Yes/No/Yes/Yes, only mac OS |
Yes/Yes/Yes/Yes, only Windows and mac OS |
Yes/No/No/No |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes | |
Storage size |
15 GB/paid version up to 30 TB |
5 GB/paid version up to 5 TB |
5 GB/paid version up to 2 TB |
50 MB/paid version up to 10 GB |
Unlimited |
Unlimited (local storage)/backup service limits |
Unlimited (local storage)/backup service limits | |
Synchronization |
Yes |
Yes |
Yes |
Yes, 2 devices/unlimited paid version |
Yes |
Yes |
Yes | |
Versioning/markdown support |
No/Yes, only Web via plugin |
Yes/Yes, only Web via plugin |
No/Yes, only Web via plugin |
Yes, paid version/Yes, only Web via plugin |
Yes/Yes |
Yes/Yes |
Yes, paid version/Yes | |
Sharing and collaboration |
Yes, paid version |
Yes, paid version |
Yes |
Yes, paid version |
Yes |
No |
No | |
Offline access |
Yes |
Yes |
Yes |
Yes, only PC/Yes, paid version |
No |
Yes |
Yes | |
No |
Yes |
Yes |
Yes, only Windows and mac OS |
No |
Yes |
Yes | ||
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes, paid version | ||
User data, advertising, paid features |
User data, advertising, paid features |
User data, paid features |
User data, advertising, paid features |
Donations |
Donations |
Donations, paid version | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
•CryptPad is a zero knowledge service for the management of various types of documents in a collaborative way on the Web.
•Carnet is an open source multi platform Web application based on NextCloud/OwnCloud and Android application to take note with synchronisation capabilities.
Virtual assistant services and applications | ||||||||
Feature |
Project | |||||||
Developer |
|
Apple |
Microsoft |
Amazon |
Samsung |
Community |
Mycroft | |
No |
No |
No |
No |
No |
Yes |
Yes | ||
Android/iOS/PC |
Yes/Yes/Yes, Chrome OS only |
Yes/Yes/Yes, macOS only |
Yes/Yes/Yes, Windows only |
Yes/Yes/Yes, Windows only via Cortana |
Yes/No/No |
No/No/Yes, only Windows | ||
Quality understanding |
High |
High |
High |
High |
High |
High |
High | |
Multi language support |
Yes |
Yes |
Yes |
Yes |
Limited |
Yes, via Snips |
No, in development | |
TV/wear/car/home/speaker devices support |
Yes/Yes/Yes/Yes/Yes |
Yes/Yes/No/Yes/Yes |
No/Yes/No/Yes/Yes |
Yes/Yes/Yes/Yes/Yes |
Yes/Yes/No/No/No |
No/No/No/Yes/No |
No/No/No/Yes/No | |
Third party device support |
Yes |
No |
Yes |
Yes |
No |
Yes, Raspberry Pi |
Yes, Raspberry Pi | |
Third party app support |
Yes |
Yes |
Yes |
Yes |
No |
Yes, in development | ||
Ready to use |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes | |
Advertising, users data |
Advertising, users data |
Advertising, users data |
Advertising, users data |
Advertising, users data |
Donations, paid features |
Donations, paid features | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
No |
•Konele is an open source Android application that offers speech recognition services (speech-to-text) to other applications. It is currently limited to a few languages (English and Estonian).
•Almond is an open source application for Android that offers a virtual assistant service that respects the privacy of the user. At the moment it is limited only to the English language.
There are various alternatives that do not require you to share your data with anyone. At the moment the best alternative is Mycroft.
•Common Voice it is a Mozilla project to teach to a machine how people speak in real life. The project is used by many other services and applications including Mycroft;
•Teach Mycroft is a project that improves Mycroft voice recognition capabilities through direct teaching by users.
Social network services and applications | ||||||||||
Feature |
Project | |||||||||
Developer |
|
|
|
Microsoft |
Steemit |
Diaspora/Community |
Community |
Community |
Community | |
No |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Centralized |
Decentralized |
Decentralized |
Decentralized |
Decentralized |
Decentralized | |
Infrastructure jurisdiction |
USA |
USA |
USA |
USA |
World |
World |
World |
World |
World | |
Number of active users (millions) |
2200 |
1000 |
330 |
260 |
|
1 |
|
|
| |
Web/Android/iOS |
Yes/Yes/Yes |
Yes/Yes/Yes |
Yes/Yes/Yes |
Yes/Yes/Yes |
Yes/Yes, via Mixion/No |
Yes/Yes, via Dandelion*/Yes, via Twispora |
Yes/Yes/No | |||
Yes |
Yes |
Yes |
Yes |
No, not necessary |
Yes |
|
Yes, via plugin |
Yes | ||
Censorship |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No | ||
Third party app support | ||||||||||
Integration with other social networks or blogs |
No |
No |
No |
No |
Yes, Facebook, Twitter |
Yes, Twitter, WordPress |
Yes, Diaspora*, GNU social |
Yes, Mastodon. Twitter |
Yes, GNU social | |
Advertising, users data |
Advertising, users data |
Advertising, users data |
Advertising, users data |
Steem and Steem Dollars cryptocurrencies |
Foundation, donations |
Donations |
Donations |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
•Movim is a decentralized open source social network platform that seeks to protect user privacy. Movim provides interesting features such as integrated chats, blogs, news and is based on open and scheduled protocols;
•Minds is an open source, decentralized social network platform for Internet freedom. Minds uses the blockchain and pays the user for his contributions to the community through crypto currency.
•Pixelfed is a federated open source image sharing platform similar to Instagram.
•Untrackme is an open source Android application available on F-Droid to redirect requests from Instagram and Twitter to their open source advertising-free and privacy friendly alternative interfaces Bibliogram and Nitter.
•AndStatus is an open source Android application to access different social networks (Twitter, Mastodon, GNU social). AndStatus can combine feeds from all networks into a single timeline and allows you to read and publish even when you are offline.
•Frost is an open source Android application for accessing Facebook that respects confidentiality and does not require permission for unnecessary functionality.
•Barinsta is an open source Android application for accessing Instagram that respects confidentiality with some limitations (content viewing only).
•Fedilab is a multi-functional open source Android application to access Fediverse (federated universe), consisting of microblogging Mastodon, Friendica and GNU social, photo sharing Pixelfed and PeerTube video hosting PeerTube.
•Librem.one is a collection of open source services that use encryption to protect your privacy and communicate securely with others:
◦Librem Social is a decentralized social network based on Tusky and similar to Mastodon.
Note: you can use Instagram and Twitter through their open source advertising-free and privacy friendly alternative interfaces Bibliogram and Nitter.
Video content services and applications | |||||||
Feature |
Project | ||||||
Developer |
|
Vimeo |
Vivendi |
DTube |
Framasoft |
Internet File | |
No |
No |
No |
Yes |
Yes |
Yes | ||
Architecture |
Centralized |
Centralized |
Centralized |
Decentralized |
Centralized | ||
Infrastructure jurisdiction |
USA |
USA |
Francia |
World |
World |
USA | |
Quality/quantity video |
High/Maximum |
High/High |
High/High |
High/Low |
High/Low |
High/Low | |
Features | |||||||
Web/Android/iOS |
Yes/Yes/Yes |
Yes/Yes/Yes |
Yes/Yes/Yes |
Yes/Yes/Yes, via DTubeViewer |
Yes/Yes, via NewPipe/Yes, via any browser |
Yes/Yes/Yes | |
Contents download |
Yes, content from paid users |
Yes, native apps only |
Yes, via DTubeViewer |
Yes |
Yes | ||
Contents upload |
Yes, unlimited, 15 minutes and 12 hours verified users |
Yes, 5 GB, 7 TB paid version |
Yes, unlimited |
Yes, unlimited |
Yes, 1 GB |
Yes, unlimited, recommended 50 GB | |
Registration required |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
Censorship |
Yes |
Yes |
Yes |
No |
No |
Yes | |
Advertising, users data, paid features |
Users data, paid features |
Advertising, users data |
Steemit cryptocurrency |
Donations |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
No |
No |
No |
•Sepia Search is an open source video search engine optimised for PeerTube channels publicly available.
•FreeTube is an open source multi platform (GNU/Linux, Windows, macOS) application to use YouTube. It supports all the features of the official application; it respects user privacy and removes advertising while reducing data traffic.
•NewPipe is an open source Android application to use YouTube. It supports all the features of the official application; it also allows you to download audio and video, listen audio only, it works in background and pop up mode. Finally, it respects the user privacy and removes advertising by reducing data traffic and battery consumption. It does not use the official YouTube API and for this reason it is only available on F-Droid.
•Untrackme is an open source Android application available on F-Droid to redirect requests from YouTube to its open source advertising-free and privacy friendly alternative interface Invidious.
Note: you can use YouTube through its open source advertising-free and privacy friendly alternative interface Invidious.
Office services and applications | |||||||
Feature |
Project | ||||||
Developer |
Microsoft |
Microsoft |
|
Apache |
The Document Foundation |
Collabora/NextCloud/The Document Foundation | |
No |
No |
No |
Yes |
Yes |
Yes | ||
Architecture |
Decentralized |
Centralized |
Centralized |
Decentralized |
Decentralized |
Decentralized/centralized | |
Quality/functionality |
High/High |
High/High |
High/High |
Average/Average |
High/High |
High/High | |
GNU/Linux/Windows/macOS/Android/iOS |
No/Yes/Yes/Yes/Yes |
No/Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes/Yes |
Yes/Yes/Yes/No/No |
Yes/Yes/Yes/Yes (viewer)/No |
Yes/Yes/Yes/Yes/Yes | |
Version Web |
No |
Yes |
Yes |
No |
No |
Yes | |
Microsoft Office format (.doc, .xls, .ppt, etc.) support |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
Microsoft Office XML format (.docx, .xlsx, .pptx, etc.) support |
Yes |
Yes |
Yes |
No, only reading |
Yes |
Yes | |
Open Document Format (ODF) (.odt, .ods, .odp, etc.) support |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
PDF format support |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
Collaboration tools |
No |
Yes |
Yes |
No |
No |
Yes | |
Paid licence, advertising, users data |
Paid licence, advertising, users data |
Paid advanced features, advertising, users data |
Donations |
Donations |
Donations, paid features | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
No |
No |
No |
Some applications on the Web useful as collaborative tools:
•EtherCalc is an open source online program for the management of a spreadsheet in a collaborative way on the Web;
•EtherPad is an open source online program for the management of text documents in a collaborative way on the Web;
•Disroot is a free privacy conscious service that offers EtherCalc, EtherPad and PrivateBin;
•CryptPad is a zero knowledge service for the management of various types of documents in a collaborative way on the Web;
•OnlyOffice is an open source service for collaboratively managing documents on the Web, for corporate communication, e-mail and project management tools.
•Windows: muPDF, Scribus, FoxItReader;
•macOS: muPDF, Scribus, FoxItReader;
•Android: muPDF, Book Reader;
•iOS: muPDF.
Antivirus or antimalware services and applications | ||||||||
Feature |
Project | |||||||
Developer |
Microsoft |
Avast |
MalwareBytes |
AvIre |
Comodo |
Cisco |
Community | |
No |
No |
No |
No |
No |
No (use ClamAV) |
Yes | ||
GNU/Linux/Windows/macOS/Android/iOS |
No/Yes/No/No/No |
No/Yes/Yes/Yes/No |
No/Yes/Yes/Yes/Yes |
No/Yes/Yes/Yes/Yes |
Yes/Yes/Yes/No/No |
No/Yes/No/No/No |
Yes/Yes, via ClamWin/Yes/No/No | |
Real time protection/boot scan |
Yes/No |
Yes/Yes |
Yes/Yes, limited trial period |
Yes/Yes |
Yes/Yes |
Yes/No |
Yes, partial | |
CloudAV Protection |
No, Windows 10 only |
Yes |
Yes, limited trial period |
Yes |
|
|
No | |
Heuristic support |
No |
Yes |
Yes, limited trial period |
Yes |
|
No |
No | |
Email/anti-spam scanning support |
No |
Yes/No, paid version only |
No/No |
Yes/No |
Yes/Yes |
Yes/No |
Yes/No | |
Web browsing protection support |
No, Edge only |
Yes |
No |
Yes |
Yes |
No |
No | |
Rootkit protection |
No |
Yes |
Yes, limited trial period |
Yes |
Yes |
Yes |
No, GNU/Linux and macOS only via Rootkit Hunter | |
Advanced ransomware protection |
No |
No, paid version only |
Yes, limited trial period |
No, paid version only |
No |
Yes |
No | |
Yes, Windows firewall |
No, paid version only |
No |
No |
Yes |
No |
No | ||
Advertising, users data |
Paid version, users data |
Paid version, users data |
Paid version, users data |
Paid version, users data |
Users data |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Some alternatives to protect your devices:
•LibreAV is a free and open source anti malware application for Android that uses machine learning.
•Spybot is an antispyware and antirootkit application for Windows available in various versions.
•OSSEC is a free and open source solution that provides Host based Intrusion Detection System (HIDS) functionality for the devices of a PC network (GNU/Linux, Windows, macOS), firewall and router through a centralized control panel.
Authenticator services and applications 2FA | ||||||||
Feature |
Project | |||||||
Developer |
|
Twilio |
FreeOTP |
Community |
Beem |
Proton |
Community | |
No |
No |
Yes |
Yes |
Yes |
Yes |
Yes | ||
GNU/Linux/Windows/macOS/Android/iOS |
No/No/No/Yes/Yes |
Yes/Yes/Yes/Yes/Yes |
No/No/No/Yes/Yes |
No/No/No/No/Yes |
No/No/No/Yes/No |
Yes/Yes/Yes/Yes/Yes |
Yes/Yes/Yes/No/No | |
Memory encryption support |
No |
Yes |
No |
Yes |
Yes |
Yes |
Yes | |
Clear/password/openPGP backup support |
No/No/No |
No/No/No |
No/No/No |
No/No/No |
Yes/Yes/No |
Yes/Yes/Yes |
Yes/Yes/No | |
Compatible with Google authenticator |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
Cloud synchronization |
Yes, via Google Drive |
Yes, via Authy |
No |
No |
No |
Yes, via Proton Drive |
Yes, via Google Drive/Dropbox | |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes | ||
Users data, advertising |
Paid version only |
Donations |
Donations |
Donations |
Paid version only |
Donations | ||
Advertising, tracking and profiling |
Yes |
No |
No |
No |
No |
No |
No |
Note: Proton Pass and Bitwarden are password managers and 2FA authenticators, but it is not recommended to keep saved passwords and authentication code generation in the same place.
Note: a very good guide on how two factor authentication (2FA) works and the necessary precautions.
Note: a very good list of services and applications that support two factor authentication (2FA).
Password management services and applications | |||||||||
Feature |
Project | ||||||||
Developer |
Lastpass |
Dashlane |
1password |
Community |
Mozilla |
Bitwarden |
Proton |
Community | |
No |
No |
No |
Yes |
Partially |
Yes |
Partially |
Yes | ||
Web/GNU/Linux/Windows/macOS/Android/iOS/browser |
Yes/Yes/Yes/Yes/Yes/Yes/Yes (Firefox, Brave, Chrome, Edge, Safari) |
Yes/Yes/Yes/Yes/Yes/Yes/Yes (Firefox, Brave, Chrome, Safari) |
Yes/Yes/Yes/Yes/Yes/Yes/Yes (Firefox, Brave, Chrome, Safari) |
No/No/No/No/Yes/Yes/Yes, Firefox only via Sync |
Yes/Yes/Yes/Yes/Yes/Yes/Yes (Firefox, Brave, Chrome, Edge, Safari) |
No/No/No/No/Yes/Yes/Yes (Firefox, Brave, Chrome, Edge) |
No/No/No/No/Yes/Yes/Yes (Firefox, Brave, Chrome) | ||
Architecture |
Centralized |
Centralized |
Centralized |
Decentralized |
Centralized/decentralized |
Centralized/decentralized |
Centralized |
Local, no storage | |
Yes |
Yes |
Yes |
No, not necessary |
Yes |
Yes |
Yes |
No, not necessary | ||
Yes |
Yes |
Yes |
No, not necessary |
Yes |
Yes |
Yes |
No, not necessary | ||
Master password/Secret key |
Yes/No |
Yes/Yes, optional |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes |
Yes/Yes | |
Offline password derivation |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes | |
Data encryption/brute force attack prevention |
AES256/PBKDF2-SHA256 |
AES256/Argon2d-SHA256 |
AES256/PBKDF2-HMAC-SHA256 |
AES256-ChaCha20/HMAC-SHA256-Argon2id |
AES256/PBKDF2-HMAC-SHA256 |
AES256/Argon2-SHA256 |
AES256/bcrypt-SHA256 |
AES256/PBKDF2-SHA256 | |
Devices synchronization |
Yes |
Yes |
Yes |
Yes, via Keyshare |
Yes |
Yes |
Yes |
No, not necessary | |
Users data, paid licence |
Users data, paid licence |
Paid licence |
Donations |
Donations |
Paid licence |
Paid licence |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
•KeeWeb is a multi platform open source for password management compatible with Keepassxc.
•Masterpassword is a multi platform open source application for password management similar to Lesspass.
•Master password is known only to the user and is necessary to decrypt the data;
•Secret key is a secret typically stored on the user device needed to decrypt the data.
A robust password meets the following requirements:
•Length: a password should be at least 12 characters long (the longer and more secure it is);
•Randomness: a password should be an unpredictable string of characters (combination of letters, numbers and symbols) that does not resemble words or names;
•Uniqueness: a password should be unique for each account to reduce vulnerability in case of cyber attacks.
•Firefox Monitor a service that allows you to be notified if your online accounts have been exposed to a data breach and find out how to react to better protect them.
Android apps catalogue | ||||||
Feature |
Project | |||||
Developer |
|
Topk-pure |
Aptoide |
Community |
Community | |
No |
No |
Yes |
Yes |
Yes | ||
Quality/quantity apps |
High/High |
Average/Average |
High/High |
High/High |
High/Average | |
Registration required |
Yes |
No |
No, available |
No, paid app only |
No | |
Preinstalled apps store |
Google catalogue |
Apk-pure catalogue |
Collection of catalogues |
Google catalogue |
Open source catalogue | |
Type of applications |
Open source/closed source/paid |
Open source/closed source |
Open source/closed source |
Open source/closed source/paid |
Open source | |
Security |
Average, possibility of virus and counterfeiting |
Low, high possibility of virus and counterfeiting |
Average, possibility of virus and counterfeiting |
Average, possibility of virus and counterfeiting |
High, no possibility of virus and counterfeiting | |
Sharing apps via local network (WiFi, Bluetooth) |
No |
No |
No |
No |
Yes | |
Required secure source installation/root user |
No/No |
Yes/No |
Yes/No |
Yes/No |
Yes/No | |
Remote control of apps by providers |
Yes |
No |
No |
No |
No | |
Users data, advertising |
Users data, advertising |
Users data, advertising |
Donations |
Donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
No |
No |
Mobile operating systems | ||||||||
Feature |
Project | |||||||
Developer |
Google/device manufacturers |
Apple |
Amazon |
|
Samsung |
Community |
Community | |
Partially (driver and mobile services closed source) |
No |
No |
Partially (driver closed source) |
Partially (driver and SDK closed source) |
Partially (driver closed source) |
Partially (driver closed source) | ||
AOSP/Linux |
iOS/Darwin |
AOSP/Linux |
AOSP/Linux |
GNU/Linux |
AOSP/Linux |
AOSP/Linux | ||
Smartphone/tablet/TV/smartwatch/car/IoT |
Yes/Yes/Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes/Yes/No |
Yes/Yes/Yes/No/No/Yes |
Yes/Yes/Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes/No/Yes |
Yes/Yes/No/No/No/No |
Yes/Yes/No/No/No/No | |
Root user |
No |
No |
No |
Yes |
No |
Yes |
Yes | |
Preinstalled apps |
Yes, G Suite |
Yes, Apple apps |
Yes, Amazon apps |
No |
Yes, Samsung apps |
No |
No | |
Preinstalled mobile services, libraries and API |
Yes, Google Mobile Service (GSM) (Play Service, Play Store, Search) |
Yes, integrated on the operating system |
Yes, integrated on the operating system |
No, available via microG Project |
Yes, integrated on the operating system |
No, available via microG Project |
Yes, microG Project | |
Preinstalled app store |
Yes, Google Play |
Yes, App Store |
Yes, Amazon Store |
No, available via F-Droid, Aurora Store, |
Yes, Samsung Store |
No, available via F-Droid, Aurora Store, |
No, available via F-Droid, Aurora Store, | |
Remote control by providers |
Yes |
Yes |
Yes |
No |
Yes |
No |
No | |
Virtual assistant |
Yes, Google Assistant |
Yes, Siri |
Yes, Alexa |
No |
No |
No |
No | |
Apple |
Amazon |
|
Samsung |
Donations |
Donations | |||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
No |
No |
No |
No |
Some alternatives to the most common mobile operating system:
•/e/ is an open source operating system based on AOSP oriented to respect the confidentiality of the user and without Google Mobile Service (GSM).
•Replicant is a free operating system based on AOSP that aims to replace all proprietary Android components with free counterparts FOSS.
•Ubuntu Touch is a mobile version of the Ubuntu operating system capable of operating both in a mobile environment, touchscreen, and as a desktop computer through the "convergence" feature;
•Pure OS is a privacy and security oriented operating system based on Debian and designed to include only FOSS free software. Pure OS supports both mobile devices and computers. In particular, it is maintained by Purism as the operating system for the company's Librem smartphone and Librem laptops.
Note: malware tends to attack devices with Android operating system because it is the most widespread with about 86% of users while iOS with about 13% of users. The main threats come from the installation of malicious applications often from unknown sources. By using the open source application catalog F-Droid or Aurora Store catalog you can reduce these risks.
Note: Vigilante is an open source application for Android that notifies when a third-party application and/or service use the camera and/or microphone (similar to the native iOS 14 feature).
Operating systems | ||||||||
Feature |
Project | |||||||
Developer |
Microsoft |
Apple |
|
Community |
Canonical |
Community |
Debian/Community | |
No |
No |
Yes |
Yes |
Yes |
Yes |
Yes | ||
Windows NT |
Darwin |
Linux |
Linux |
Linux |
Linux |
Linux | ||
Yes/Yes/No/No/Yes |
Yes/No/No/No/No |
Yes/No/No/No/Yes |
Yes/Yes/Yes/Yes/Yes |
Yes/Yes/No/Yes/Yes |
Yes/Yes/No/Yes/Yes |
Yes/Yes/No/Yes/Yes | ||
Package manager |
No, third parts Chocolatey |
No, compatible app GNU/Linux |
Yes |
APT |
Pacman |
APT | ||
Preinstalled app store |
Yes, Windows store |
Yes, AppStore |
Yes, Google Play |
No |
Yes, GNOME software, Synaptic |
No |
Yes, Software center | |
Remote control by providers |
Yes |
Yes |
Yes |
No |
No |
No |
No | |
Virtual assistant |
Yes, Cortana |
Yes, Siri |
Yes, Google Assistant |
No |
No |
No |
No | |
Paid licence, Microsoft |
Apple |
|
GNU/Linux foundations, donations |
Canonical, donations |
Foundation, donations |
Debian foundation, donations | ||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
No |
Yes, Ubuntu only |
No |
No |
Some alternatives to the most common operating system:
•Zorin OS is an alternative operating system to Windows and macOS based on Debian. Zorin OS is available in various versions and is mostly FOSS free software, although it includes some proprietary components.
Note: malware tends to attack computers running Windows for various reasons:
•The most common operating system is Windows with about 82% of users, macOS with about 13% of users and GNU/Linux with about 2% of users;
•Windows users are generally less competent and therefore less able to defend themselves than GNU/Linux users;
•The Windows operating system is structurally less secure than GNU/Linux and macOS.
The main threats stem from the installation of malicious applications often downloaded from the Internet. Using the Chocolatey catalog or Windows store you can reduce these risks.
Smartphone | |||||||
Feature |
Project | ||||||
Developer |
Google/fabricantes de equipos |
Apple |
Amazon |
Fairphone |
Purism |
Pine 64 | |
Partially/No |
No/No |
No/No |
Yes/No |
Yes/Yes |
Yes/Yes | ||
Removable battery |
No, excluding the exceptions |
No |
No |
Yes |
Yes |
Yes | |
Physical power buttons camera/microphone/WiFi/GPS |
No/No/No/No |
No/No/No/No |
No/No/No/No |
No/No/No/No |
Yes/Yes/Yes/Yes |
Yes/Yes/Yes/Yes | |
Alternative operating system |
Yes, if supported by Lineage OS, Ubuntu Touch, Postmarket OS |
No |
No |
Yes, Ubuntu Touch, Postmarket OS |
Yes, Ubuntu Touch, Postmarket OS, Sailfish OS, Plasma Mobile | ||
Root user |
No |
No |
No |
Yes |
Yes |
Yes | |
Preinstalled apps |
Yes, G Suite |
Yes, Apple apps |
Yes, Amazon apps |
Yes, G Suite removible |
Yes, removible |
No | |
Preinstalled mobile services, libraries and API |
Yes, Google Mobile Service (GSM) (Play Service, Play Store, Search) |
Yes, integrated in the operating system |
Yes, integrated in the operating system |
Yes, Google Mobile Service (GSM) (Play Service, Play Store, Search) removible |
Yes, Librem.one removible |
No | |
Preinstalled app store |
Yes, Google Play |
Yes, App Store |
Yes, Amazon Store |
Yes, Google Play removable |
No, available GNOME software, Software center |
No, available GNOME software, Software center | |
Remote control by providers |
Yes |
Yes |
Yes |
Yes, removable |
No |
No | |
Virtual assistant |
Yes, Google Assistant |
Yes, Siri |
Yes, Alexa |
Yes, Google Assistant removable |
No |
No | |
Business model |
Google, OEM |
Apple |
Amazon | ||||
Advertising, tracking and profiling |
Yes |
Yes |
Yes |
Yes, removable |
No |
No |
•Fairphone is a modular smartphone (10/10 ifixit repairability) designed to last at least 5 years. It is also a fairtrade smartphone for which the materials are fairtrade and the entire production process, from the mineral mines in the Congo to the assembly in China, is free of labour exploitation (child and non-child) and environmentally friendly. Finally, it allows the installation of the operating systems Fairphone Open and Lineage OS (AOSP) and Ubuntu Touch and Sailfish OS (GNU/Linux).
•Librem 5 is a smartphone with open hardware and software oriented towards privacy and security (physical buttons for camera, microphone, WiFi and GPS and lifetime operating system updates). The smartphone uses the Pure OS operating system and allows you to install Ubuntu Touch y Postmarket OS (GNU/Linux).
•Pinephone is a smartphone with open hardware and software oriented to privacy and security (physical buttons for camera, the microphone, WiFi and GPS). The smartphone is compatible with different operating systems Ubuntu Touch, Postmarket OS, Sailfish OS and Plasma Mobile (GNU/Linux).
•/e/ is a complete and completely "deGoogled" mobile ecosystem consisting of an open source AOSP mobile operating system and selected applications to respect privacy. /e/ modifies and sells smartphones from the most popular brands and provides support for the installation of the ecosystem on your smartphone.
Detoxification from data: how to use your smartphone intelligently.
This document is released under the Creative Commons Attribution-ShareAlike CC BY-SA license.