Option 1: leave everything enabled, & everything works with full spyware enablement too
Option 2: disable everything, but forget basics like mail notifications, yet still resign yourself to invasion from irrevocably disabled services
Option 3: the middle ground. Just kidding, disabling only what you truly don’t need is wildly opaque, and painfully slow: options are split and hidden wherever possible. Forget any “apply to all” graces being given by King Google. Disable the wrong thing, and break a seemingly enabled feature.
Also love how some options are given during setup, while others are only informational: “visit settings later to change this thing - hope you forget!”
So, what’s left: Option 4, root your phone and hope Magisk will work when you need to use your bank app?
I just want my cell provider to spy on me because physics. (Govt banning sale/sharing of that data would be epic, maybe some day in the far future.) Extra spying in the shadiest ways is bad and Google should feel bad.
The default install is really clean, you can run all the Google services you want, you can install them in their own user account, or profile, and not share with other accounts. You have full control. The only thing that doesn't work is tap to pay
Android Device Policy (ie: the spyware that is work profiles) doesn't work either. An important FYI for folks whose personal device doubles as their work device.
Android Auto is supported. Payments are the only thing holding me back currently. But that's not something the developers of GrapheneOS can change unfortunately.
Yeah, if you're going as far as rooting and Magisk, go the extra half step and install App Manager (io.github.muntashirakon.AppManager). With profiles and 1-Click ops, you can disable trackers, freeze apps, revoke permissions. It's like a 1000 pound scalpel.
Yeah, I only buy phones with good Custom ROM support and then I flash them without Google Apps. I don't think banking apps would be happy about that, though.
Technically, it is private. As in privately shared. Not just anyone can get your data. It's a select club.
Other than the employees handling it, it's mostly pay per view.