GrapheneOS privacy hardening

ceditlee55

Hello! I’m doing research on privacy hardening options in GrapheneOS. I’m trying to understand how users reduce sensor access on their devices. Could someone explain:

How microphone, camera, and GPS can be disabled or restricted in GrapheneOS?
Are there specific developer options that users should disable for better privacy?
Can other sensors (like accelerometer or motion sensors) also be restricted?

Thank you!

Johnnyloans

ceditlee55

1) Set app permissions to allow or deny usage
Global deny/allow with quick tiles

2) it's risky changing some of these. The stability, error-free nature of the phone

3) There is a permission called "sensors" that covers everything not under the other permissions including accelerometer/motion and others. Under security and privacy, I would set it to automatically deny all installed apps to this setting. turn it on as needed per app.

harp

Johnnyloans Under security and privacy, I would set it to automatically deny all installed apps to this setting. turn it on as needed per app.

This setting doesn't revoke the sensor permission from apps already installed. It just avoids the sensor permission for future app installations. If you want to revoke sensor permission from already (before you set that preference) installed apps you need to do it manually for each app.

ceditlee55

Johnnyloans Thank you

Drimagon

This is all written down in the features list of GOS:

1:
Microphone, camera and GPS can be disabled via shortcuts.

Developer options shouldn't be enabled on GOS at all. There is no need to enable it.
https://grapheneos.org/features#sensors-permission-toggle
"Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don't receive events."

ceditlee55

Drimagon Thank you

Johnnyloans

harp

Correct, I phrased it wrong

ceditlee55

harp Thank you