you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 9 months ago* (last edited 9 months ago) (6 children)

I have separate profiles:

  • main user has no Google Play services or Gapps: just F-Droid apps and a couple of play store apps I use daily (anonymously via Aurora Store app)
  • Aurora profile has other playstore apps that will run without Google Play Services
  • PlayStore profile is for anything that requires full Google Play Services (banking, purchased apps)
  • Work profile is full-on Google everyting (Google school)
  • Location is on, but only shared with Organic Maps, FindMyDevice (FMD) and Transit.app
  • USB port is power-only (no data).

Some compromises I've made:

  • I have fingerprint unlock enabled (but not on my password vault or PlayStore/Banking profile)
  • I tap-to-pay with a Garmin watch ( you only need the Garmin app to set-up the credit card, then it can be deleted )

But... I think starting-out, don't worry about it. If you load all the same apps as on your old phone, into a single main profile, it'll still be a huge improvement.

  • source
  • hideshow 6 child comments
  • [–] 6 points 9 months ago* (2 children)

    Good recommendation. Good to remember that each app has its own sandbox so for most scenarios you are all set anyways (except running google play in general you may be against).

    An excellent middle ground, if preferred, would be your main profile with everything that works anonymously and without google, etc, then a second profile that is not so anonymous (ie banking, google maps, etc).

    You also likely need your password manager app in both profiles.

    p.s. if you also use fingerprint (or any biometric) unlock, remember you can hold the power button to go into lockdown if you ever have a security threat (ie think you might be arrested or robbed or whatever like that). This disables biometrics and requires your pin. (i believe you should do this even if you use only a pin since it takes your phone into a BFU state, which you can google more about if interested).

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 9 months ago

    Very interesting. I was cpnsidering using separate profiles, but I read somewhere that google services is sandboxed anyway, so having it all in 1 profile is fine.

    What I will need a separate profile for though, is for banking apps. I have one which is adament that I use a keyboard app from the play store and will refuse to function if I have one from F-droid installed.

  • source
  • parent