Help understanding Sandboxing and Network Location on GrapheneOS.

jackdoe

I've read through the GrapheneOS documentation and have done searching on this site, but I am still uncertain on some things.

I've installed GOS on two Pixel 8s for my wife and myself. We're coming from years of Iphones and Gmail.

Our use-case for our new phones:

Phone*
Text*
Browser*
Maps
Camera*
Podcasts (I assume there will be several options for this)
Weather
Finance (our bank works with GOS)
Email

I assume what is included with GOS will suffice.

Maps - From what I've read Googlemaps seems to be what we will use. I think installing the app is preferable to using it through the browser. It will only be a data leak while it is in use, and it won't share data with any other apps, correct?

Weather - Regardless of what I use for this, I assume it will be the same as with maps and only share data when in use.

For both of these what are the best ways to set network locations options?

Email - For the short-term we are both still tied to Gmail. I plan on transitioning us to Proton or similar soon, but in the interim, what happens if I download the Gmail app? Or is going through a browser a better option? Or are both options garbage? Can I use a safer email app and forward from Gmail until I've eliminated them?

ClickClickDrone

jackdoe

Maps - From what I've read Googlemaps seems to be what we will use. I think installing the app is preferable to using it through the browser. It will only be a data leak while it is in use, and it won't share data with any other apps, correct?

In general, no, there won't be much leaks, especially if you avoid using it with your Google accounts. However, there is a small, but possible risk, of any Google apps using IPC to talk to eachother without you knowing, but this doesn't matter since Maps needs internet access anyway and will likely leak via that way instead.

In short: you'll likely be fine if you don't use a Google account

Weather - Regardless of what I use for this, I assume it will be the same as with maps and only share data when in use.

I'd recommend Breezy Weather; it doesn't even need location access! Also, it has got a very pleasant UI.

Email - For the short-term we are both still tied to Gmail. I plan on transitioning us to Proton or similar soon, but in the interim, what happens if I download the Gmail app? Or is going through a browser a better option? Or are both options garbage? Can I use a safer email app and forward from Gmail until I've eliminated them?

What do you mean with "safer"?
More privacy?
More secured against remote email attacks?

pixelfairy

jackdoe

For weather, you can save save bookmark a weather site.

If OSM based maps (organic maps, comaps, etc) don't work for you, theres also "HERE we go". But thats also in the google play store. You can put all the google stuff in a private space. Even if you keep that unlocked most of the time, it will be easy to lock away as you migrate away from them. Then you can deny google services location and use a vpn if you really don't want them tracking you. Here we go works fine with play services disabled, but you'll need it when you want to check for updates.

For email, Tuta works better with graphene. Proton requires google play services for notifications. The CEO has acknowledged this in an interview, and said they don't know a good way to fix it. I guess they don't want to look at Tutas open source code.

You could also use a mail provider like fastmail.com or posteo.de that supports imap and Fair Email, a client that supports conversation threading on android. Its the only android email client I know of that supports email threading, with both sent and received in the same thread and does not need play services for notifications. Thunderbird did not support message threading when I tried it, but that may have changed by now. Both of these clients support gmail.

jackdoe

ClickClickDrone Thank you for the response!

I'll check out Breezy Weather.

As for "safety" regarding email, at the beginning of this journey I am primarily focused on privacy.

DohnJoe

ClickClickDrone you'll likely be fine if you don't use a Google account

Keep in mind that if you logged in with your Google Account (because of Google Play), Google Maps will automatically log you in with the same Google account.

Only after the automatic login, you will be avle to go in Google Maps settings and log out.

I am not sure about what this means in terms of privacy, but if you do not really need navigation (only maps) you can use the webapp through the browser and skip the installation.

I personally use CoMaps, except when I have to do important trips (sometimes I have to change country), in that case I am using Waze.
Still Google owned, but at least doesn't follow my Google Account.

ClickClickDrone In general, no, there won't be much leaks

Let's remember that apps also ship trackers, just for completeness of info.

jackdoe As for "safety" regarding email, at the beginning of this journey I am primarily focused on privacy.

I would suggest Tuta Mail, especially if you do not need to self-host services that need email configuration.

ClickClickDrone

jackdoe
I see.
Honestly, you won't unfortunately get much privacy until you switch to a provider like Proton.

The good news is that you can setup e-mail forwarding from your Gmail address to Proton to help ease the switch.

But I understand if you're hesitant; it's no easy task!

In the meanwhile, you can improve security (and privacy, somewhat) by reducing permissions on Gmail's app.

Lastly, avoid using Gmail's web app, since the UI is terrible on mobile!

jackdoe

ClickClickDrone thank you for the info. Still researching which email I'll use. I've limited Gapps as much as I understand how... I've been using Gmail's web app for nearly 10 years! It is garbage!

jackdoe

DohnJoe I've donwloaded Google Maps anonymously via Aurora.

What does it mean that apps "ship trackers?"

Tuta is definitely on my list.

DohnJoe

pixelfairy For weather, you can save save bookmark a weather site.

Or curl wttr.in/<city> if you have terminals available.

gta3

pixelfairy i stopped suporting Proton products a while back, they very convieniently seem to dodge certain questions & solutions, plus there main office is directly located within the same building (just different floor) to many well known data harvesting and spyware companies.

Im not that naive... When it smells like bs it usually is.

jackdoe

pixelfairy Thanks! Fair Email might be a winner. I've not screwed with imap and pop in nearly 20 years, I've been out of IT for a LONG time.

gta3

Instead of google maps you could try MagicEarth.

Seeems to be much more car friendly than OsmMaps etc

pixelfairy

gta3 Magic earth is also OSM based. OSM doesn't work well in some areas.

I like the weather thing. I have a desktop link to the weather specifically in my area. One click. Cli junkie, but not on phones.