~/

posts

whoami

dev

contacts

rss

A Good Privacy List - 2024 Update


Table of Contents


Introduction

This is my list of Privacy Alternatives of not so good mainstream products who use your data to make money and collaborate with governments for mass surveillance. The list is compiled in a simple way, privacy defence requires continuous research, so before using the apps on this list do your own research and if you find something wrong please contact me so I can update it.

I do not sponsor or get paid by any of the organizations of the products listed and there are NO referrer URLs in the list, to verify the links you can check the source code of the page (i.e. right click -> “View Page Source”). When I choose to use a service it means that I have search information before, and I have my own opinion about it that may not be the same as other people in this sector. I often read articles where an application is declared not private and insecure without consistent sources which confirm the claims, or where it’s declared reliable and instead ..it is ad advertising company or a government agency. So if you don’t see a lot of “well-known” products for privacy on this list, it is most likely because they are in this last category.

Security is a process, so you cannot fully trust any application, organization, and the people behind it. Regarding this topic see:

Threat Model

Defence in depth

I hope this modest work can help to defende you and fight the censorship and oppression we are experiencing especially in recent years, knowledge is power, so search, read, and think with your head! In this sector it’s very easy to meet organizations and projects that claim to defend privacy but in reality are just mousetraps.

Requirements

Only products and applications that meet the following requirements are included in the list:

  • Security first: services that are not a security risk (although this is a very long and complex topic), and that are not in the experimental phase (i.e. the software is in the alpha phase). Applications that have had external audits take precedence in the list but isn’t a fundamental requirement.

  • Open source software and clear references to the application source code: I know that a closed source program doesn’t necessarily mean it’s malicious, but I prefer to know that there’s code available for everyone to read.

  • Clear references to the development team and organization (i.e. “About Us” section): if I cannot find easily what is the organization behind the project I prefer to skip to another choice.

  • Privacy Policy clear and easily accessible: If I have to click for 10 pages before reading a complicated and obscure privacy policy I consider that there is something wrong.

  • Not sharing data with Third Parties: i.e. No other third party companies that buy your data, about that argument, see: Notes

  • The project/application must be updated and actively maintained: If a program is not actively maintained is not inserted in the list, with exceptions, some applications may be valid even if updated some time ago.

  • The organization does not have a history of crime or controversy: Shadows on the past such as disputes over data collection, or unethical behavior toward the environment other companies or people. Again, do your own research, it is very difficult sometimes to get clear and reliable information about organizations or people behind a software or a service.

Android App Stores

  • F-Droid - F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform.
  • Droid-ify - Minimal F-droid client for design and performance.
  • Neo Store - An F-Droid client with modern UI and an arsenal of extra features.
  • Fossdroid - A web frontend of F-Droid: an alternative software repository comprising only free, open source software for Android.
  • Aurora Store - An unofficial FOSS client to Google Play with an elegant design and privacy.

Artificial Intelligence

  • llama.cpp - Inference of Facebook’s LLaMA model in pure C/C++ so it can run locally on a CPU.
  • Jan - Local AI Assistant.
  • LocalAI - LocalAI is the free, Open Source OpenAI alternative.
  • Ollama - Get up and running with Llama 3.2, Mistral, Gemma 2, and other large language models.
  • Continue - Open-source AI code assistant for VS Code and JetBrains.

Calendar Apps

  • Nextcloud Calendar - The Calendar app is a user interface for Nextcloud’s CalDAV server.
  • EteSync - Secure, end-to-end encrypted, and privacy respecting sync for your contacts, calendars, tasks and notes.
  • Proton Calendar - Proton Calendar was built by the team behind Proton Mail, the world’s largest encrypted email service.
  • Tuta Calendar - Zero-Knowledge Calendar: Secure, Private & Intuitive.

Cloud Storage

  • Proton Drive - Free, encrypted, and secure cloud storage.
  • Filen - Zero knowledge end-to-end encrypted cloud storage, redefined.
  • Nextcloud - The most popular open source content collaboration platform for tens of millions of users at thousands of organizations across the globe.
  • Seafile - Seafile is an open source file sync and share platform, focusing on reliability and performance.
  • PrivateStorage - End-to-end encrypted data storage in the cloud.
  • Cozy - A smart personal cloud to gather all your data.

DNS Servers

  • AdGuard DNS - AdGuard DNS uses powerful filters to eliminate ads and trackers on every connected device.
  • NextDNS - The new firewall for the modern Internet.
  • Mullvad DNS - Our encrypted public DNS service uses DNS over HTTPS (DoH) and DNS over TLS (DoT).
  • OpenNIC - OpenNIC (also referred to as the OpenNIC Project) is a user owned and controlled top-level Network Information Center.
  • UncensoredDNS - UncensoredDNS is the name of a DNS service which consists of two uncensored DNS servers.
  • LibreDNS - This is a DNS service run by LibreOps.
  • Blahdns - A hobby Adblock DNS project with DoH (http/2,http/3), DoT, DoQ, DNSCryptv2 and DNS over DTLS support.

Email Providers

  • Proton Mail - Secure email that protects your privacy
  • Riseup Email - Riseup Email.
  • tuta mail - Email to feel good about: private and easy to use.
  • Disroot Email - Disroot provides secure email accounts for your desktop or mobile email client, or via our webmail.
  • mailbox.org - mailbox.org is the e-mail provider that puts data protection, freedom from advertising and independence first.
  • Posteo - Posteo is an independent email provider based in Berlin. We offer anonymous and sustainable email accounts, address books and calendars.
  • Runbox - Email for Earth.
  • Forward Email - We’re the only 100% open-source provider. (we’re transparent and focused on privacy and security).

Email Anonymous Forwarding

  • SimpleLogin - Receive and send emails anonymously.
  • AnonAddy - Protect your real email address using email aliases.

Encryption Software

Disk Encryption

  • VeraCrypt - VeraCrypt is a free open source disk encryption software for Windows, Mac OSX and Linux.
  • LUKS - LUKS is the standard for Linux disk encryption.
  • Tomb - Tomb is a minimalistic command line tool based on Linux dm-crypt and LUKS, trusted by hackers since 2007.
  • DiskCryptor - DiskCryptor is an open encryption solution that offers encryption of all disk partitions, including the system partition.

File Encryption

  • GnuPG - GnuPG is a complete and free implementation of the OpenPGP standard.
  • Cryptomator - Encrypt your cloud, protect your privacy.
  • age - A simple, modern and secure encryption tool (and Go library).
  • Kryptor - Kryptor is a simple, modern, and secure file encryption and signing tool for Windows, Linux, and macOS.
  • Pycocrypt - Simple and secure file encryption for everyone.

File Sharing

  • SecureDrop - Share and accept documents securely.
  • Anoxinon.de - Anoxinon e.V. - for a shared Internet.
  • Disroot file uploader - Lufi - Disroot file uploader.
  • Cryptpad - Flagship instance of CryptPad, the end-to-end encrypted and open-source collaboration suite.
  • croc - Easily and securely send things from one computer to another.
  • Destiny - Destiny is an open source secure file transfer application that does not reveal identities.
  • Magic Wormhole - Get things from one computer to another, safely.
  • OnionShare - OnionShare is an open-source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

Git Hosting

  • Codeberg - Codeberg is a non-profit, community-led effort that provides Git hosting and other services for free and open source projects.
  • GitLab - GitLab a DevOps software package that can develop, secure, and operate software.
  • NotABug - NotABug.org is a free-software code collaboration platform for freely licensed projects.
  • Gitea - Private, Fast, Reliable DevOps Platform.
  • Sourcehut - This suite of open source tools is the software development platform you’ve been waiting for.

Graphics Editor

  • GIMP - GNU Image Manipulation Program
  • Krita - Krita is a free and open source digital painting application.
  • Inkscape - Inkscape is a powerful, free design tool.

Instant Messaging

Centralized

  • Signal - State-of-the-art end-to-end encryption (powered by the open source Signal Protocol) keeps your conversations secure.
  • Molly - Enhanced and security-focused fork of Signal.
  • Threema - Secure Communication Swiss Made.
  • Session - Session is an end-to-end encrypted messenger that minimises sensitive metadata.

Matrix Clients

  • Element - A sovereign and secure communications platform. Built by the creators of Matrix.
  • FluffyChat - The cutest messenger in matrix.
  • SchildiChat - SchildiChat is a feature-rich messenger for Matrix based on Element with some extras and tweaks.
  • Syphon - A not for profit, open source matrix client with a focus on privacy and ease of use.

XMPP Clients

  • Gajim - A fully-featured XMPP client.
  • Dino - Modern open-source chat client for the desktop.
  • Conversations - Conversations is a Jabber/XMPP client for Android 5.0+.
  • Xabber - Open-source XMPP client for Android and Web
  • ChatSecure - Encrypted Messenger for iOS.

P2P

  • Briar - Censorship-resistant peer-to-peer messaging that bypasses centralized servers.
  • Berty - Unstoppable P2P Communication.
  • Ricochet Refresh - Ricochet Refresh is a peer-to-peer messenger app that uses Tor to connect clients.

Other Decentralized Implementations

Maps

  • OpenStreetMap - OpenStreetMap is a map of the world, created by people like you and free to use under an open license.

Mobile

  • OsmAnd - Offline Maps and Navigation.
  • Organic Maps - Organic Maps is a free Android & iOS offline maps app based on OpenStreetMap.

Operating Systems

GNU/Linux Operating Systems

  • Linux Mint - Linux Mint is an operating system designed to work ‘out of the box’ and comes fully equipped with the apps most people need.
  • Fedora - An innovative platform for hardware, clouds, and containers, built with love by you.
  • Debian - The universal operating system.
  • Arch Linux - A simple, lightweight distribution.
  • Gentoo Linux - A highly flexible, source-based Linux distribution.
  • openSUSE - The makers’ choice for sysadmins, developers and desktop users.
  • NixOS - Nix is a tool that takes a unique approach to package management and system configuration.
  • Alpine Linux - Alpine Linux is a security-oriented, lightweight Linux distribution based on musl libc and busybox.

Security-Focused Operating Systems

  • Qubes OS - A reasonably secure operating system.
  • Whonix - Whonix runs like an app inside your operating system - keeping you safe and anonymous.
  • Tails - Is a portable operating system that protects against surveillance and censorship.
  • ParrotOS - Parrot Linux, is a full Debian-based operating system, that is geared towards security, privacy and development.

Android-based

  • Calyx OS - CalyxOS is an Android mobile operating system that puts privacy and security into the hands of everyday users.
  • DivestOS - A mobile operating system divested from the norm.
  • LineageOS - A free and open-source operating system for various devices, based on the Android mobile platform.
  • GrapheneOS - The private and secure mobile operating system with Android app compatibility.
  • postmarketOS - PostmarketOS (pmOS), is a Alpine Linux based distribution for mobile devices.
  • /e/OS - A fork of LineageOS that does not contain proprietary Google apps or services.
  • Ubuntu Touch - A mobile experience made by UBports community.

Password Managers

  • Bitwarden - Securely storing, managing, and sharing sensitive online data such as passwords, passkeys, and credit cards.
  • KeepassXC - Cross-platform Password Manager.
  • Passky - Passky is a simple, modern, lightweight, open-source and secure password manager.
  • Proton Pass - Free password manager with identity protection.
  • Vaultvarden - Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.
  • pass (Cli) - The standard unix password manager.
  • gopass (Cli) - gopass is a simple but powerful password manager for your terminal.
  • padloc - Padloc not only helps you remember all your passwords, it also securely stores credit cards, notes, documents and more.

Privacy Frontends

Reddit

  • Redlib - An alternative private front-end to Reddit, with its origins in Libreddit.

Reddit Mobile Clients

  • Infinity - A Reddit client for Android.
  • Geddit - An open-source, Reddit client for Android without using their API.
  • RedReader - An unofficial, open source Android client for Reddit.
  • Stealth - Stealth is an account-free, privacy-oriented, and feature-rich Reddit client.

See also: Android FOSS Apps List #Reddit Client

Reddit Alternative Communities

  • Lemmy - A link aggregator for the fediverse.

YouTube

  • Invidious - Invidious is an open source alternative front-end to YouTube.
  • Piped - An alternative privacy-friendly YouTube frontend which is efficient by design.
  • ViewTube - The open source, privacy-conscious way to enjoy your favorite YouTube content.

YouTube Desktop Clients

  • FreeTube - The Private YouTube Client.
  • yt-dlp (Cli) - A feature-rich command-line audio/video downloader.

YouTube Mobile Clients

  • NewPipe - The lightweight YouTube experience for Android.
  • LibreTube - An alternative frontend for YouTube, for Android.
  • SongTube - Simple & Beautiful App (Tool) made in Flutter to Download Media from YouTube.
  • PipePipe - A FLOSS Android app to let you browse YouTube, NicoNico and BiliBili freely.
  • InnerTune - A Material 3 YouTube Music client for Android.
  • YTDLnis - YTDLnis is a free and open source video/audio downloader app that uses yt-dlp, a program that can download videos and audio from over 1000 websites.

See also: Android FOSS Apps List #Media Player

Youtube Alternatives Platforms

  • PeerTube - PeerTube is a tool for sharing online videos developed by Framasoft, a french non-profit.

Search Engines / Metasearch Engines

  • DuckDuckGo - Search without being tracked.
  • SearXNG - SearXNG is a free internet metasearch engine which aggregates results from various search services and databases.
  • Metager - Ad-free meta-search engine run by a Nonprofit organization.
  • Ecosia - The search engine that palnts trees.

Social Networks

  • Mastodon - Social networking that’s not for sale.
  • diaspora - The online social world where you are in control.
  • Pixelfed - Explore + Share beautiful photos and videos.
  • Pleroma - Pleroma is social networking software compatible with other Fediverse software such as Misskey, Pixelfed, Mastodon and many others.
  • Aether - Peer-to-peer ephemeral pReddit Clientublic communities.

Torrent Clients

  • qBittorrent - download link The qBittorrent project aims to provide an open-source software alternative to µTorrent.
  • Transmission - A Fast, Easy and Free Bittorrent Client For macOS, Windows and Linux.
  • WebTorrent - The streaming torrent client for Mac, Windows, & Linux.
  • Deluge - Deluge is a lightweight, Free Software, cross-platform BitTorrent client.
  • FrostWire - Video Downloader, BitTorrent Client and Media Player.

VPNs

  • Mullvad - VPN that prioritizes anonymity and security, offer anonymous sign-up process (Country: Sweden).
  • ProtonVPN - VPN service launched in 2017 and operated by the Swiss company Proton AG, the company behind the email service Proton Mail (Country: Switzerland).
  • IVPN - Secure, fast VPN service that offers no-logs and antitracking features (Country: Gibraltar).
  • AirVPN -VPN provider that offers advanced security and privacy features (Country: Italy).

Web Browsers

Desktop

  • Tor Browser - A free and open source software that allows you to browse the web anonymously and securely with the Tor network.
  • Mozilla Firefox - Firefox is a free web browser that blocks ad trackers, respects your privacy and works on any device. (It needs some hardening and tweaking to achieve great privacy).
  • LibreWolf - Custom and independent version of Firefox, with the primary goals of privacy, security and user freedom.
  • ungoogled-chromium - Google Chromium, sans integration with Google.
  • Mullvad Browser - Mullvad Browser is a version of Tor Browser with Tor network integrations removed, aimed at providing Tor Browser’s anti-fingerprinting browser technologies to VPN users.

Android

  • Tor Browser for Android - Tor browser for Android.
  • Mull - This is a privacy oriented and deblobbed web browser based on Mozilla technology.
  • DuckDuckGo Browser - Free web browser for Android, a privacy-protecting alternative to Google Chrome and other browsers.
  • Cromite - Cromite is a Chromium fork based on Bromite with built-in support for ad blocking and an eye for privacy.

See also: Android FOSS Apps List #Browser

Other Privacy and Security Resources

Notes

Utilization of 3rd party services: About organizations that use third party software I think a clarification should be made. Often it’s necessary to use third party services in order to make them stable and working, examples are Proton or Signal services that use some Amazon AWS or Google servers for traffic routing. It’s not easy to manage thousands or millions of users and it’s not easy to manage continuous spam attempts or criminal activities, impossible to do with self-hosted servers with little traffic capacity.

US based services: In the post-Snowden era we all know the data collection and surveillance capabilities of the NSA, many are advising not to use services in US jurisdiction, this may be true for unencrypted services, such as email without OpenPGP encryption, IRC servers etc., but if the data is encrypted, then I think we can make an exception. On the other hand, the NSA’s surveillance and storage capabilities it extend globally, So try to encrypt as much as possible, if the data is stored in some server in Nevada, China, or outer space ..it will be encrypted data, about this speech see: Post-quantum_cryptography). However, I generally tend to prefer services that have jurisdiction in countries with good privacy laws (i.e. Switzerland, Estonia, Iceland) or at least that they are not part of the Five Eyes, about this topic see: The Five, Nine, and Fourteen Eyes agreements (Explained).

Donations

If you liked my work, you can support me with a small donation:

Bitcoin

19vqscjZcpa22qScPoQEuHJyyiyKokZ6C3

Monero

42HrxGUKPzNNJKFguPfFhXQajwNDnhLbogy6EWexWw9Sh5pTumVk7dkcD2PB4MuFgD1m8rnaR3pr1g852BWUTpXaTo9rQyr