GrapheneOS question

Acrocantho

Hey, I'm in the middle of searching for a decent phone with privacy I can control. I use my phone for personal and work use. Would GrapheneOS be compatible with Uber/Lyft, Microsoft Teams, and workplace authenticator apps like VIP Access? Or would needing all of that make GrapheneOS a moot point?

Sigismund

Acrocantho I'm in the middle of searching for a decent phone with privacy I can control.

You came to the right place.

Acrocantho Would GrapheneOS be compatible with Uber/Lyft, Microsoft Teams, and workplace authenticator apps like VIP Access?

Yes to first two. I assume Teams would also work (needs play apps installed in same profile) as for VIP Access you may want to test it and report back.

As a word or advice, use separate profile(s) for work stuff.

ryrona

Acrocantho Would GrapheneOS be compatible with Uber/Lyft, Microsoft Teams, and workplace authenticator apps like VIP Access? Or would needing all of that make GrapheneOS a moot point?

Microsoft Intune does not work, so if your company requires Intune for accessing Teams, Teams will not work. But Microsoft Teams works fine whenever Intune is not force enabled by your company.

cupcake-alibi

You may need sandboxed Google Play Services, which you can easily download from the GrapheneOS app store. Even with Google Play Services, Teams, etc. GrapheneOS is more private and a lot more secure than other operating systems.

Some apps are blocking GrapheneOS unfortunately. So you may want to double check that for every app you have to use.

Acrocantho

cupcake-alibi Is there a list somewhere about what apps or corporate entities block GrapheneOS?

Acrocantho

Sigismund Is it possible to run two profiles simultaneously for sandboxed teams? Or will I theoretically have to switch back and forth?

Acrocantho

ryrona My workplace runs Microsoft Teams and Outlook through VIP Access, Boxer, and Intelligent Hub (Omnissa) for android devices. I don't know if Intune is involved.

Sigismund

Acrocantho it's not possible to have access to two profiles simultaneously so you will indeed have to switch between them to access the resources hosted there.

Watermelon

Acrocantho Is it possible to run two profiles simultaneously for sandboxed teams? Or will I theoretically have to switch back and forth?

https://grapheneos.org/features#improved-user-profiles
As far as I remember, the GrapheneOS team last changed the number of profiles you can run in parallel in this release:
https://grapheneos.org/releases#2024111700

Acrocantho Is there a list somewhere about what apps or corporate entities block GrapheneOS?

This list is incomplete:
https://grapheneos.org/articles/attestation-compatibility-guide#apps-banning-grapheneos
There's also a community-maintained list of banking apps tested to be compatible, with a few listed with strikethrough meaning that they're incompatible:
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

Acrocantho My android phone at the present creates a separate profile for my work apps, I just have to switch between two windows, with no crossover.

It seems that you've given an app the dangerous Device Admin permission to create a work profile for you. As far as I know, this also depends on the app creating the work profile to ensure separation between the normal user profile that houses the work profile, and the work profile. If you want a privacy-focused phone, I strongly recommend you to not grant third-party apps the Device Admin permission or any other dangerous permission on your phone. The current two alternatives to work profiles are normal user profiles and Android 15's Private Space feature.

Acrocantho Is that what you mean when you say "Private Space"?

https://discuss.grapheneos.org/d/16670-private-space-on-android-15-grapheneos
https://source.android.com/docs/security/features/private-space
And a random news article:
https://www.howtogeek.com/how-private-space-works-on-android-15/

Dumdum

Sigismund it's not possible to have access to two profiles simultaneously

Unless you use a Private Space.

Acrocantho

Dumdum @Sigismund My android phone at the present creates a separate profile for my work apps, I just have to switch between two windows, with no crossover. Is that what you mean when you say "Private Space"?

Sigismund

Dumdum True, this can be used instead of an actual secondary profile, depending on the use case.

Dumdum

Acrocantho Is that what you mean when you say "Private Space"?

Settings > Security and Privacy > Private space

blusterpilgrim

You can download VIP Access from apkmirror and it works perfectly fine without Play Services installed.