How can someone who is forced to use social media still be private, solutions?

fyftdogo

hello GrapeheneOS community <3

I need your advice for something I'm not sure how I should approach.
I run a business where I'm forced to use almost all social media you can think of(tiktok;Instagram;twitter;reddit; etc.).
Recently I got a pixel phone and set up one of my user profiles as private as i could while still being convenient enough for me. I use this profile for my personal life only and don't use anything work related on it.

My question is, how should I approach my work related stuff? Should I download the apps in a separate profile? This seems counterproductive to me because the apps are full of invasive trackers, so they are not private at all. One (solution?) I think I could find is to download progressive web apps (f.e twitter) or download apps like infinity instead of reddit but I'm not sure if all of this would make a difference.

Or should I just do all of the work stuff on a normal android phone while using my pixel for my personal life?

UpStream

fyftdogo You could download all the privacy invasive apps into a secondary user profile. That's what you've already done and it's one way to go about it.
Apps in one profile can communicate with each other. Apps cannot communicate with other apps in different profiles.
If you want to do work related stuff you could switch to the other work profile do your stuff and then end the session and go back to your main profile. That's what profiles are for to have separate identities. You're just being tracked as long as you're in that secondary profile and even then you can restrict apps by toggling the according permissions like location, contacts etc. depending on your needs and that way narrowing down what they can access. Those privacy invasive apps won't be able to access data outside the profile they're in even if you give them full storage access.

An other way would be as you've already stated using a second phone for your business stuff but leaving it at home all the time. If its not possible to leave your work phone at home make use of profiles.

fyftdogo

Additional info: I run a paid service in which customers don't know my real identity (until maybe in the future if I change my opinion) but for now I want it to stay like that so I don't want people to be able to dox me or hack any of my stuff

[deleted]

UpStream An other way would be as you've already stated using a second phone for your business stuff but leaving it at home all the time. If its not possible to leave your work phone at home make use of profiles.

I would recommend two different devices reliant on two independent forms of internet access. If you want to keep your private life private, it cannot overlap with your business life anywhere. It is a tricky thing to achieve.

Kevin719

UpStream Apps in one profile can communicate with each other.

I thought that was the big plus with GOS, apps are sandboxed and can't communicate with other apps in the same profile

matchboxbananasynergy

Kevin719 All apps a user installs on Android (and therefore on GrapheneOS which is based on AOSP as well) are sandboxed by default, there's no fallback to that.

Apps can't access each others' data. Apps in the same profile can communicate with each other if there's mutual consent, where both apps agree to pass data back and forth.

If you don't want to happen, split them in separate profiles. There may also be a feature in the future to restrict app communication even in the same profile.

https://twitter.com/GrapheneOS/status/1636042398043086850

UpStream

Kevin719
Apps can see global settings like time zone and other similar stuff like time etc.

@matchboxbananasynergy
I'm not sure if an app can see all the installed apps in a profile without mutual consent? I mean the fact what apps are installed but not any data?

Kevin719

matchboxbananasynergy Apps can't access each others' data. Apps in the same profile can communicate with each other if there's mutual consent, where both apps agree to pass data back and forth.

That's the way I thought, Google apps could see other google apps, but Google can't see my bank app data or my messages or calendar unless I allowed it in some way

matchboxbananasynergy

Kevin719 Or unless your bank app chooses to communicate with Play Services or some other app.

matchboxbananasynergy

UpStream Apps in a profile can trivially see other apps in that same profile. They don't really need the QUERY_ALL_PACKAGES permission to do it either.