GlytchMeister and everyone, sorry for the slow update: they got back to me.

They answer is in short: yes. it's the normal app behavior and there is no way to turn off this anywhere inside any of the proton android apps. Also, this won't change in the foreseeable future.

Personally, I find this very sad. I really like proton, but this is a break up reason for me. It will be a proper hassle, but I'm going for a new mail host. GOS is such a therapeutic experience without Google, and I strictly want to keep it like that. My takeaway: be the possibly less dependent on any mail provider, and just use domains for most of the things. I wish I would do that earlier, now it would save me loads of time. Anyway, lesson learned.

@TRInvictus Thank you for your comments on RethinkDNS! I'll also definitely deep dive into all of this as well.

      Speeduser7533 I think they don't, but I'll test it soon and post the results here. My pick is they probably not, as they using their own push service, which is great anway. Proton's constant connection to Google is due to their reliance on Google Push Services (what is still the case if you disable it and if you don't have Google Push), or that is what they said. Crossed fingers!

        Speeduser7533 Tuta doesn't use anything Google for their services. I switched to Tuta when I switched to Graphene and learned Proton push services wouldn't work.
        As for the pinging of Google from a Proton service it isn't their VPN app cause I use it in my main profile and it doesn't ping anything google. I use their Email and calendar app in another profile and something is pinging. I think it's the email app.

          Bugger. I recently bought into Proton before I learned how to really investigate this kind of crap. Was about to use their calendar app to migrate my schedules and events and whatnot from my iPhone to my pixel.

          Bugger bugger bugger.

          Right. I guess that means I need a calendar app and an email app.

          I'm rapidly approaching the point of learning how to set up my own server rack and host my own private domain and instances of things. Getting tired of having to determine if a provided service is trustworthy and finding out it ain't.

          Which is a real pain in my butt, because I don't own a desktop PC, I don't have a lot of money, and my internet isn't exactly amazing. And I have yet to have a good experience with Linux... Well, desktop Linux. GOS is doing much better than any other Linux or Linux-adjacent OS I've had the displeasure of wrangling. (Tho I still can't get it to accept a custom ringtone...)

            • [deleted]

            • Post #40

            GlytchMeister AOSP keyboard doesn't have a thumbs up. So, thumbs up! Maybe an idea for devs to look at more than security...

              @mmmm
              @GlytchMeister
              I don't know about an explicit RethinkDNS guide, start with my post above, description of specific features can be found on RDNS's github page, there's a lot of explanations in the issues.
              You may want to open an RDNS thread here on the forum, pretty much sure there are some GOS users around that use RDNS, kind of a "place to go about RDNS" where we can help and answer questions...?

                GlytchMeister I'm rapidly approaching the point of learning how to set up my own server rack and host my own private domain and instances of things.

                An own "home lab" is an excellent thing for sure, but one has to know how set it up and keep it running.
                And keep in mind, your "own private domain" makes you trackable everywhere, better use public services (email, VPN, etc.) that are known to respect privacy.

                    TRInvictus

                    Uuuuuugh I thought that was like, the "you need to be able to See The Code like Neo to pull it off, but if done right, is very secure and private" option

                    headdesk

                    I'm rapidly approaching the point at which I turn off my pixel and go back to my decrepit iPhone 8 and accept defeat

                        GlytchMeister well it depends what you use it for.

                        I have a home lab. My services are searx for websearches, lingva for translate, and various other front ends and services. Calendar, contacts and photos are also self hosted. This is all easy, and you really dont have to worry too much about security so long as you access it all through a VPN, or do a bit of research into setting up reverse proxies securely. Tailscale is a good VPN option (free, though not all open source). I am assuming youre not being targeted by a nation state or even LE. If you are then I would not suggest self hosting or be so blasé about how easy it is to secure.

                        I personally dont try to self host my own email server, website or anything else that I can't just 'turn off' and cope with it if it need too.

                        Above anything else its a fun project.

                          Well, you're correct that I'm not being targeted. Well, as far as I know. I am a hobbyist SciFi and fantasy writer, so my searches are liable to raise some eyebrows, but I have yet to be visited by forgettable people in cheap suits and sunglasses, so I assume I'm not being actively targeted. :P

                          I don't have the knowhow to do it, I don't have the time to learn, and I don't have the hardware even if I had the knowledge and time, anyway, so... Yeah. Its just frustrating.

                          • mmmm replied to this.

                            GlytchMeister a raspberry pi and a free weekend is all you need and you can have a self hosted version of searx and have the most private internet search engine free of big tech tracking. You can message me privately if you want a bit of help.

                            Anyway, this has got off topic.

                            My advice re: giving up GrapheneOS, dont do it. Take a deep breath and try not to over think it all. One step at a time is all thats needed. The OS out of the box is already leaps and bounds better than anything else. Dont buy into overblown minutiae regarding privacy services, and definitely dont let it fatigue you. You dont have to give up every proton service just because it makes an api call to google, something which most people dont even understand what it's actually doing.

                              Speeduser7533 its not a good look if you intentionally implement it, but only after it has been exposed to public they attempt to patch things up.

                                bootloader

                                Thank you for revealing and discussing this issue in Proton email (and others) apps.

                                FWIW, I've been quite satisfied using Vanadium to access my various Proton online storage(s), and AFAICT Google is not involved.

                                Also Vanadium seems the MOST trustworthy and secure (hardening) web app around. Even if Proton modifies its' apps, they won't be as secure as Vanadium. So for me, the question becomes, how badly do I need push notifications?

                                Don't need them.

                                Also, the quick-reply business crowd seems to be moving to SMS - which of course has NO privacy - but significant security thanks to GOS auditing and hardening.

                                (FWIW this same reasoning applies to my banking - I use Vanadium, and not some poorly-written bank app)

                                Just suggesting that you do not abandon Proton web storage(s). HTH.

                                    Unfortunately, I do need notifs for my emails :/

                                    Annoying.