Best setup for my threat model?

BradOssi

I'm a SA victim in a DV-like, trafficking-like, situation. I'm unsure if my prior contact with a three letter agency could have me placed under surveillance or investigation. Unlikely but my lawyer as said that it's a possibility. I was stalked easily by my offenders mostly because they had access to my phones and computer and I had been very naive. We found out my Apple and Google accounts had been hacked and monitored enabling me to be tracked by phone and googlemaps, and maybe via an wireless tracker.

A nurse told me about this OS awhile back saying its good for privacy and was just finally able to get a Pixel8a with cash. I'm trying to figure the best way to set it up. My physical safety is at risk. I'm concerned about being hacked and tracked by my abusers (which includes a local LE officer and two men with a lot more resources than me.) I'm planning on keeping my iPhone and old number for awhile until I figure GOS out and have not gotten a SIM yet. I'm also concerned about LE acquiring my phone and accessing sensitive information before I make any decisions about what I want to do. I also need to be able to take pictures with my phone and record phone calls and send it to a cloud; I'm very concerned that if I were record or picture an interaction with my abusers, that they could simply take my phone if they realized, and thus the evidence.

My goal is to not be tracked or have my emails or maps accessed, protect my sensitive personal information, and to collect and store evidence outside the device if needed. I also want to use the phone exclusively to plan a long distance move in case my other devices are compromised again. I also want to know if there is a way to give access to a specific limited profile if someone wants to see what is in my phone and I can't resist without being hurt.

Probably9857

BradOssi I also want to know if there is a way to give access to a specific limited profile if someone wants to see what is in my phone and I can't resist without being hurt.

Probably not. You can create separate profiles, or use the private space in the owner profile, but the presence of those will be obvious to anyone somewhat familiar with Android.

You would likely increase the risk of physical harm if you tried to do something like that.

There is also the duress pin that would wipe the device, but that too would be obvious and comes with similar risks.

BradOssi

Probably9857

So that means you can see all the other profiles from any which profile, then? Would there be any benefit to separating my apps into multiple profiles? I'm still doing a lot of reading so I'm not sure how private space works or what it is, or the benefits of it.

I will still need some kind of cloud storage app and a calendar app. I would also like to get a podcast app but its not absolutely necessary. I was given a Tails usb, so I think I could move things to it to save but removed from my phone. Not sure if that works with GrapheneOS? I haven't been able to try it because the usb doesn't work with my mac.

JollyRancher

BradOssi

One thing you can do, assuming you live in the US, is buy a Mint Mobile test Sim ($2 at Bestbuy), use that number to establish a new google account your abuser doesn't know about and get cloud storage that way.

You can also use a prepaid visa card to pay for a Mint account. That will give you a number and data your abuser doesn't know about. In your use case, that is likely safer than using wifi as you have to assume your attacker controls the router and can/does monitor what you do over it.

Probably9857

BradOssi Would there be any benefit to separating my apps into multiple profiles?

The main benefit of profiles is to prevent your apps from sharing data with each other, especially with Play Services, and hence Google.

In your situation, that seems like much less of a concern. So profiles may not be a very useful tool for you.

BradOssi So that means you can see all the other profiles from any which profile, then?

Yes, you can see which other profiles exist from any profile. If someone has physical possesion of your device, profiles would only help you hide data from a very cursory glance or an incompetent adversary.

JollyRancher

Use a public WiFi network at a McDonalds or the like. Go to tuta.com and create an account. Go to Proton.me and create an account, use the tuta account for the email verification.

Pay for Proton Unlimited using a prepaid visa gift card bought with cash. You want the password manager, cloud storage, and VPN.

Do not download any of the proton or tuta apps if you are concerned about needing to hand your unlocked device over.

You should assume that your abuser will know what GOS is and will be savvy enough to use your password to enable user profiles, and if they see others then demand access.

While Proton isn't truly secure, it will be secure against the threat you are facing and will provide a private communications channel for you to use.

Fadcam would cover your recording needs. Then upload to Proton Drive.

The Proton password manager will give you a way to store login information safely without leaving a trace on device.

Use the ProtonVPN browser extension to conceal your web traffic.

If you are more willing to risk potential exposure if your abuser examines your phone and forces the owner password out of you there is more that you can do.

But if that is a concern then you need to be careful of what apps you install and about using secondary profiles as a concealment mechanism.