cmc/cleberg.net

  1#+date:        [2025-06-03 Tue 11:38:40]
  2#+title:       Private iOS Apps: What I Actually Use
  3#+description: The iOS apps I use that prioritize privacy.
  4#+slug:        private-ios-apps
  5#+filetags:    :linux:privacy:
  6
  7The world is evolving into a privacy nightmare, where our own devices are being
  8used by numerous parties to constantly track and report on our activities. This
  9is especially prevalent on iOS, where platform restrictions leave users without
 10many options to lock down their data.
 11
 12However, there are apps that exist that can help enhance the privacy of an iOS
 13device. The post below details a number of privacy resources, directories, and
 14tools for iOS.
 15
 16**Resource Table**
 17
 18| Name                                   | Type                        |
 19|----------------------------------------+-----------------------------|
 20| [[https://github.com/pluja/awesome-privacy][Awesome Privacy]]                        | App Lists & Directories     |
 21| [[https://www.privacyguides.org/en/os/ios-overview/][PrivacyGuides.org]]                      | App Lists & Directories     |
 22| [[https://cyberinsider.com/][CyberInsider]]                           | Guides & Educational        |
 23| [[https://ssd.eff.org/module-categories/further-learning][EFF Surveillance Self-Defense]]          | Guides & Educational        |
 24| [[https://osintframework.com/][OSINT Framework]]                        | Guides & Educational        |
 25| [[https://securityplanner.consumerreports.org/][Security Planner (Consumer Reports)]]    | Guides & Educational        |
 26| [[https://discuss.privacyguides.net/][PrivacyGuides Forum]]                    | Community & Discussion      |
 27| [[https://www.reddit.com/r/privacy/][r/Privacy]]                              | Community & Discussion      |
 28| [[https://www.reddit.com/r/iosprivacy/][r/iOSPrivacy]]                           | Community & Discussion      |
 29| [[https://tosdr.org/en/][Terms of Service; Didn't Read (ToS;DR)]] | Policy & Transparency Tools |
 30| [[https://browserleaks.com][BrowserLeaks.com]]                       | Privacy Testing & Tools     |
 31| [[https://mullvad.net/check][Mullvad Privacy Check]]                  | Privacy Testing & Tools     |
 32| [[https://support.apple.com/en-us/HT212025][iOS App Privacy Report (Settings)]]      | Privacy Testing & Tools     |
 33| [[https://privacytests.org/][PrivacyTests.org]]                       | Privacy Testing & Tools     |
 34
 35#+begin_quote
 36*Note*: This list focuses solely on iOS-compatible resources and tools. No
 37Android comparisons here as I have not used Android in many years.
 38#+end_quote
 39
 40* Email
 41
 42First, I like to consider email as my first app on a new device. However, iOS is
 43\extremely\ lacking in this area. Certain options are private, such as Proton
 44Mail and Tuta, but they have certain restrictions and ecosystem lock-in methods
 45that I try to avoid.
 46
 47Canary Mail was a decent option for a while, although a bit mysterious, but they
 48have recently leaned into the AI hype pretty heavily, which is concerning.
 49However, it's still one of the only options for PGP emails on iOS.
 50
 51- [[https://proton.me/mail][Proton Mail]] - One of the more popular private email options available on iOS.
 52  Allows custom domains, but does not allow for IMAP/SMTP usage, so you're
 53  locked into using their apps. Open source.
 54- [[https://tuta.com/][Tuta]] - Tuta also locks you into their clients and they do not allow you to use
 55  custom domains. Open source.
 56- [[https://canarymail.io/][Canary Mail]] - Closed source, so you can't verify anything about what they are
 57  building into the app. However, it's one of the only options for PGP mail on
 58  iOS. Advanced features are locked behind a paywall.
 59
 60Another suggestion is to use a browser-based web client. You can install browser
 61mail clients as progressive web apps (PWAs). For example, I have been using
 62[[https://webmail.migadu.com][webmail.migadu.com]] as a progressive email app for a while now and it works great
 63for my purposes.
 64
 65This allows for access to your email without installing an application that
 66access native APIs or other potential data sources you may be concerned about.
 67This is especially important if you're concerned about allowing permissions to
 68device APIs, non-reproducible builds from the App Store, or mobile device
 69fingerprints.
 70
 71Lastly, [[https://blog.thunderbird.net/2025/05/thunderbird-for-mobile-april-2025-progress-report/][Thunderbird iOS]] is under development. Keep an eye out for an alpha or
 72beta release later in 2025 or early 2026. I have a feeling that once Thunderbird
 73iOS is available, it will easily become the best option for email on iOS.
 74
 75#+begin_quote
 76*I use*: Web-based email on iOS and Thunderbird on my desktop. Once Thunderbird
 77releases for iOS, I will probably use that.
 78#+end_quote
 79
 80* Browsers
 81
 82Your choice of browser is very important if you're concerned with privacy. Any
 83and all links you click will be opened in your default browser, so you need to
 84make sure you choose the right browser and configure it properly. Trackers, ads,
 85fingerprints, and data leaks are constant threats that should be avoided when
 86possible.
 87
 88- [[https://apps.apple.com/us/app/firefox-focus-privacy-browser/id1055677337][Firefox Focus]] - In my opinion, the best option for privacy on iOS.
 89  Automatically blocks trackers, erases data and history upon app close, and
 90  focused on private usage. However, it won't support your bookmarks or keep you
 91  logged into sites long-term.
 92- [[https://duckduckgo.com/app][DuckDuckGo]] - Another good option, built on chromium. Like Focus, it allows you
 93  to clear all data with a button tap.
 94- [[https://onionbrowser.com/][Onion Browser]] & [[https://orbot.app/][Orbot]] - Tor - what can I say? It's been the most popular
 95  privacy browser for ages for a reason and now it's available on iOS. Onion
 96  Browser is a Tor browser and Orbot can proxy any number of iOS apps through
 97  Tor. As with all Tor traffic, it will be slower than "regular" traffic.
 98- [[https://brave.com/][Brave]] - Another chromium-based privacy browser. Can sync with other Brave
 99  browsers via a secure linking process (no account). Fully-featured and great
100  privacy defaults. There have been some concerns in the past about the company
101  behind Brave, but I still think it's a decent option for most people.
102- [[https://www.apple.com/safari/][Safari]] (with caveats) - Great option if the browsers above don't work for you.
103  Be sure to read PrivacyGuide's [[https://www.privacyguides.org/en/mobile-browsers/#safari-ios][Safari]] section for more information on what you
104  need to do to lock it down before relying on it full time.
105
106#+begin_quote
107*I use*: Hardened safari in private mode for every day use, and Onion Browser
108for anonymous browsing.
109#+end_quote
110
111* Messaging
112
113Next up are messaging apps. If you have an iPhone, it's a good bet that you will
114be messaging other people on it. The threats for messaging apps tend to be
115metadata/data collection from cellular providers, ISPs, and Apple itself. If you
116want to protect the privacy of your messages, who your messaging, and the
117metadata around those messages (time, method, location, etc.), you'll need to
118think about which apps you're using.
119
120- [[https://signal.org/][Signal]] - My personal favorite and still the gold standard for secure and
121  private messaging. Open source, end-to-end encrypted, and runs its own private
122  push notification infrastructure so Apple can't read your message content. A
123  phone number is required to sign up, but you can create a username immediately
124  after signing up and share that with others instead of sharing your phone
125  number.
126- [[https://simplex.chat/][SimpleX]] - A decentralized, phone-number-free messaging system. Uses anonymous
127  message relays and asymmetric keys.
128- [[https://getsession.org/][Session]] - A fork of Signal's protocol that eliminates phone numbers entirely.
129  Routes messages through a decentralized onion network (like Tor).
130- [[https://element.io/][Element]] - Based on the Matrix protocol, offering decentralized, federated
131  chat. Great for groups and communities, with optional end-to-end encryption.
132  Other client options are available for Matrix on iOS, as well.
133
134#+begin_quote
135*I use*: Signal for private chats with known people, and Matrix for group chats.
136#+end_quote
137
138* VPNs & Networking
139
140Network traffic is where most surveillance happens. Even with encrypted
141messaging and browsers, your IP address and DNS queries reveal a lot about you.
142A good VPN or alternative network routing tool masks this, but not all VPNs are
143trustworthy. Avoid “free” services or those lacking transparency.
144
145- [[https://mullvad.net/][Mullvad]] - A no-logs VPN that doesn't require an email or personal info to
146  create an account. Consistently audited and privacy-focused. Their app is
147  excellent on iOS.
148- [[https://www.torproject.org/][Tor]] - Best for anonymity rather than everyday VPN use. Routes your traffic
149  over three relays, obscuring both source and destination. Slower, but
150  unmatched for high-risk browsing.
151- [[https://yggdrasilnetwork.org/installation][Yggdrasil]] - An experimental, encrypted, peer-to-peer mesh network. Less
152  polished for mobile but useful for hobbyists or building private networks
153  between devices.
154
155If you can't self-host or build your own mesh, Mullvad is hands-down the easiest
156option here. There are other VPN options available, but I haven't tested them
157all so I will simply put my vote for Mullvad here and let you research other
158options if you don't want to use Mullvad.
159
160#+begin_quote
161*I use*: Mullvad for 24/7 usage, and Tor when anonymity is required.
162#+end_quote
163
164* Password Management
165
166Weak and reused passwords are still the biggest risks for personal security. A
167good password manager makes it possible to use strong, unique credentials
168without memorizing them all.
169
170- [[https://bitwarden.com/][Bitwarden]] - Open source, audited, and free to self-host (e.g., Vaultwarden).
171  The iOS app integrates with system autofill and Face ID.
172- [[https://keepassium.com/][KeePassium]] - A KeePass-compatible client for iOS. Local database storage,
173  optional cloud sync, and no external accounts. Excellent if you want full
174  control over your credential store.
175- [[https://keepassxc.org/][KeePassXC]] + Syncing Solution - If you already use KeePass on desktop, sync
176  your database with a secure method like [[https://cryptomator.org/][Cryptomator]]-protected cloud storage,
177  Syncthing, or local-only transfers.
178
179Good passwords matter are extremely important, and these apps give you control
180over your vault.
181
182#+begin_quote
183*I use*: Bitwarden Families ($40/year) to protect passwords, passkeys, TOTP
184codes, and secure notes for my family. If I were using a solution solely for
185myself, I would prefer KeePassXC + Syncthing.
186#+end_quote
187
188* Multi-Factor Authentication (MFA)
189
190MFA is essential, but relying on SMS codes or untrusted proprietary apps defeats
191the point. Use open, local, encrypted authenticators where possible. Also, use
192passkeys if you can! I prefer passkeys, then TOTP, and then SMS/email, if other
193options are not possible.
194
195- [[https://bitwarden.com/products/authenticator/][Bitwarden Authenticator]] - Integrates with the password manager or works as a
196  standalone TOTP app. Optional encrypted backups through your Bitwarden
197  account.
198- [[https://ente.io/auth/][Ente Auth]] - Open source, end-to-end encrypted TOTP manager. Syncs encrypted
199  via Ente's infrastructure.
200- [[https://www.tofuauth.com/][Tofu]] - Minimal, offline-first TOTP app. No cloud, no telemetry.
201- [[https://raivo-otp.com/][Raivo OTP]] - Open source, native iOS app with secure iCloud backups. Clean
202  interface.
203- [[https://apps.apple.com/us/app/otp-auth/id659877384][OTP Auth]] - A longstanding, trusted TOTP manager with encrypted backups and
204  Apple Watch support. *Not open source.*
205
206I recommend pairing one of these with strong passwords and a VPN for everyday
207security.
208
209#+begin_quote
210*I use*: Bitwarden Authenticator, previously OTP Auth.
211#+end_quote
212
213* Notes & Personal Data
214
215If you're storing sensitive personal notes, account details, or journal entries,
216opt for encrypted, local-first apps.
217
218- [[https://beorgapp.com/][Beorg]] - An Org-mode-compatible outliner and task manager for iOS. Great for
219  Emacs fans and those managing plaintext files.
220- [[https://obsidian.md/][Obsidian]] - A local Markdown-based notes app. All data stays on your device
221  unless you opt for Obsidian Sync (or your own setup).
222- [[https://standardnotes.com/][Standard Notes]] - End-to-end encrypted notes, with cross-platform sync. Good if
223  you want a straightforward, secure cloud service.
224- [[https://joplinapp.org/][Joplin]] - Open source, Markdown notes with optional encryption and cloud sync
225  (Nextcloud, Dropbox, etc).
226
227These options help decouple your data from major cloud platforms while keeping
228notes portable and encrypted.
229
230#+begin_quote
231*I use*: Beorg, since I love org-mode.
232#+end_quote
233
234* Photos & Media
235
236If you're using iCloud Photos, your camera roll quietly feeds metadata and
237images to iCloud by default. If you want to self-host or encrypt your photo
238library, here's what works on iOS. At a minimum, I suggest disabling iCloud for
239the Photos app, so the data stays local on your device.
240
241- [[https://immich.app/][Immich (self-hosted)]] - Open source, feature-rich, self-hosted photo manager
242  with facial recognition and live photo support. Requires a home server.
243- [[https://ente.io/][Ente Photos]] - End-to-end encrypted photo storage with iOS and web apps. Paid
244  plans, but privacy-first infrastructure.
245
246Good privacy photos apps are rare on iOS — these two are the standout options
247right now.
248
249#+begin_quote
250*I use*: Immich for all photos.
251#+end_quote
252
253* Encryption Utilities
254
255If you're handling sensitive files, you need a proper encryption utility to lock
256them down.
257
258- [[https://cryptomator.org/][Cryptomator]] - Open source, encrypted cloud storage vaults. Integrates with
259  most cloud providers and works locally.
260- [[https://apps.apple.com/us/app/instant-pgp/id1497433694][Instant PGP]] - PGP key generation, import/export, and encrypted message/file
261  creation. Handy for old-school secure comms.
262
263If you're serious about privacy, encrypted storage and messaging layers like
264these are essential.
265
266#+begin_quote
267*I use*: Cryptomator when syncing sensitive data over Syncthing. I no longer
268require Instant PGP since Migadu's webmail client (SnappyMail) supports PGP.
269#+end_quote
270
271* News & Social
272
273News and social apps leak all kinds of usage metadata, even when you're just
274lurking. These tools let you follow content with less exposure.
275
276- [[https://netnewswire.com/][NetNewsWire]] - Free, open source RSS reader for iOS.
277- [[https://www.talklittle.com/three-cheers/][ThreeCheers]] - Privacy-friendly Tildes client for iOS.
278- [[https://getvoyager.app/][Voyager]] - Clean, independent Lemmy client.
279- [[https://joinmastodon.org/][Mastodon]] - Federated, open source alternative to Twitter.
280- [[https://joinpeertube.org/][PeerTube]] - Decentralized video platform, accessible via web or PWA.
281- [[https://pixelfed.org/][Pixelfed]] - Federated, open source alternative to Instagram.
282
283If you're going to be online, at least let it be on your terms.
284
285#+begin_quote
286*I use*: NetNewsWire (via FreshRSS) for RSS feeds, Voyager for Lemmy, and Three
287 Cheers for Tildes. I have used all of these apps and they are great, but I am
288 not very active on social sites.
289#+end_quote
290
291* Final Thoughts
292
293Whether you just want to improve your privacy in small steps or you're
294fashioning a tinfoil hat as we speak, moving to privacy-focused services and
295apps does two things:
296
2971. It protects your privacy by ensuring that your data is being protected
298   through the many methods mentioned above; and
2992. It provides money (for paid apps), support (in terms of download count,
300   reviews, ratings, etc.), and motivation for the developers and companies
301   behind these apps that provide a privacy haven for users on iOS.
302
303Every app you use, every service you sign into, quietly collects and trades your
304data. iOS makes true anonymity harder than other platforms, but these tools and
305services give you a fighting chance to keep your data private.