Commit f7d59771d8
Unsigned
Layout: unified · split
content/blog/2025-06-02-private-ios-apps.org added +321
| @@ -0,0 +1,321 @@ | ||
| 1 | #+date: <2025-06-03 Tue 11:38:40> | |
| 2 | #+title: Privacy-Friendly iOS Apps for the Paranoid Minimalist | |
| 3 | #+description: If you're a privacy nerd with an iPhone, this one's for you. A hand-picked list of iOS apps and resources to help you stay secure and ditch the data grabs. | |
| 4 | #+filetags: :privacy:ios: | |
| 5 | #+slug: private-ios-apps | |
| 6 | ||
| 7 | In a world where our phones are extensions of ourselves, balancing convenience | |
| 8 | with privacy can feel like a losing battle — especially on iOS, where platform | |
| 9 | restrictions narrow the options. But it's not impossible. There's a growing | |
| 10 | ecosystem of privacy-respecting apps, tools, and communities focused on helping | |
| 11 | iPhone users take back some control. | |
| 12 | ||
| 13 | Below is a curated list of privacy resources, directories, and testing tools | |
| 14 | specifically useful for iOS. Whether you're looking for a better email client, a | |
| 15 | trustworthy VPN, or simply places to learn more, these links are a solid | |
| 16 | starting point. | |
| 17 | ||
| 18 | **Resource Table** | |
| 19 | ||
| 20 | | Name | Type | | |
| 21 | |----------------------------------------+-----------------------------| | |
| 22 | | [[https://github.com/pluja/awesome-privacy][Awesome Privacy]] | App Lists & Directories | | |
| 23 | | [[https://www.privacyguides.org/en/os/ios-overview/][PrivacyGuides.org]] | App Lists & Directories | | |
| 24 | | [[https://cyberinsider.com/][CyberInsider]] | Guides & Educational | | |
| 25 | | [[https://ssd.eff.org/module-categories/further-learning][EFF Surveillance Self-Defense]] | Guides & Educational | | |
| 26 | | [[https://osintframework.com/][OSINT Framework]] | Guides & Educational | | |
| 27 | | [[https://securityplanner.consumerreports.org/][Security Planner (Consumer Reports)]] | Guides & Educational | | |
| 28 | | [[https://discuss.privacyguides.net/][PrivacyGuides Forum]] | Community & Discussion | | |
| 29 | | [[https://www.reddit.com/r/privacy/][r/Privacy]] | Community & Discussion | | |
| 30 | | [[https://www.reddit.com/r/iosprivacy/][r/iOSPrivacy]] | Community & Discussion | | |
| 31 | | [[https://tosdr.org/en/][Terms of Service; Didn't Read (ToS;DR)]] | Policy & Transparency Tools | | |
| 32 | | [[https://browserleaks.com][BrowserLeaks.com]] | Privacy Testing & Tools | | |
| 33 | | [[https://mullvad.net/check][Mullvad Privacy Check]] | Privacy Testing & Tools | | |
| 34 | | [[https://support.apple.com/en-us/HT212025][iOS App Privacy Report (Settings)]] | Privacy Testing & Tools | | |
| 35 | | [[https://privacytests.org/][PrivacyTests.org]] | Privacy Testing & Tools | | |
| 36 | ||
| 37 | #+begin_quote | |
| 38 | *Note*: This list focuses solely on iOS-compatible resources and tools. No | |
| 39 | Android comparisons here — just options for those of us living in Apple's walled | |
| 40 | garden. | |
| 41 | #+end_quote | |
| 42 | ||
| 43 | ||
| 44 | ||
| 45 | First and foremost, I like to consider email as my first app on a new device. | |
| 46 | However, the iOS market lacks a wealth of open-source and private email clients. | |
| 47 | There are a few options, such as Proton Mail and Tuta, which are open source and | |
| 48 | private, but they lock you into their ecosystem. Tuta doesn't allow for custom | |
| 49 | domains and neither allows SMTP/IMAP access. | |
| 50 | ||
| 51 | Canary Mail is a decent option, as it is a classic SMTP/IMAP client - and does | |
| 52 | more than most as it's one of the only PGP email clients on iOS - but is closed | |
| 53 | source and the company behind it seems more focused on AI than privacy. | |
| 54 | ||
| 55 | - [[https://proton.me/mail][Proton Mail]] - A more mainstream-feeling app with PGP support built-in. Good if | |
| 56 | you're looking for something that feels like Apple Mail but with privacy | |
| 57 | upgrades. | |
| 58 | - [[https://tuta.com/][Tuta]] - Tuta (formerly Tutanota) takes privacy a step further by encrypting | |
| 59 | subject lines, message content, attachments, and calendar events. It also | |
| 60 | avoids using phone numbers or third-party services for registration. The iOS | |
| 61 | app is reliable for the basics. Downsides: no IMAP/SMTP support, so you can't | |
| 62 | plug it into your own mail clients, and notifications require a premium plan | |
| 63 | if you want them in real-time. Great if you care about metadata exposure. | |
| 64 | - [[https://canarymail.io/][Canary Mail]] - A more polished, user-friendly email client that supports | |
| 65 | end-to-end encryption using PGP and their own “SecureSend” feature for | |
| 66 | encrypted messages. Canary works with multiple mail providers (Gmail, Outlook, | |
| 67 | etc.), so it's more of a privacy enhancement for existing services rather than | |
| 68 | a private mail provider itself. Downsides: it's a proprietary, closed-source | |
| 69 | app, and some privacy features require a subscription. Better than stock Mail | |
| 70 | for security, but you're still trusting their implementation. | |
| 71 | ||
| 72 | Another suggestion is to use a browser-based web client. You can install browser | |
| 73 | mail clients as progressive web apps (PWAs). For example, I have been using | |
| 74 | [[https://webmail.migadu.com][webmail.migadu.com]] as a progressive email app for a while now and it works great | |
| 75 | for my purposes. | |
| 76 | ||
| 77 | This allows for access to your email without installing an application that | |
| 78 | access native APIs or other potential data sources you may be concerned about. | |
| 79 | This is especially important if you're concerned about allowing permissions to | |
| 80 | device APIs, non-reproducible buils from the App Store, or mobile device | |
| 81 | fingerprints. | |
| 82 | ||
| 83 | Lastly, [[https://blog.thunderbird.net/2025/05/thunderbird-for-mobile-april-2025-progress-report/][Thunderbird iOS]] is under development. Keep an eye out for an alpha or | |
| 84 | beta release later in 2025 or early 2026. I have a feeling that once Thunderbird | |
| 85 | iOS is available, it will easily become the best option for email on iOS. | |
| 86 | ||
| 87 | #+begin_quote | |
| 88 | *I use*: Web-based email on iOS and Thunderbird on my desktop. Once Thunderbird | |
| 89 | releases for iOS, I will probably use that. | |
| 90 | #+end_quote | |
| 91 | ||
| 92 | * Browsers | |
| 93 | ||
| 94 | Your browser is basically the front door to the internet — and also the window, | |
| 95 | mailbox, and security camera. It's where trackers, ads, fingerprinting scripts, | |
| 96 | and data leaks happen most often. Even on a locked-down phone, if your browser | |
| 97 | isn't protecting your traffic, your personal info can quietly leak out through | |
| 98 | third-party scripts, embedded media, and background connections. Choosing a | |
| 99 | privacy-respecting browser is one of the most impactful decisions you can make | |
| 100 | for mobile privacy. | |
| 101 | ||
| 102 | - [[https://apps.apple.com/us/app/firefox-focus-privacy-browser/id1055677337][Firefox Focus]] - A stripped-down, no-nonsense browser from Mozilla. It | |
| 103 | automatically blocks trackers, erases your browsing history with a tap, and | |
| 104 | skips extras like tabs or bookmarks. Great for one-off searches and quick | |
| 105 | visits to privacy-sensitive sites. | |
| 106 | - [[https://duckduckgo.com/app][DuckDuckGo]] - A full-featured private browser with built-in tracker blocking, | |
| 107 | HTTPS upgrades, and a clear data button. It also integrates DuckDuckGo search | |
| 108 | and email protection. Solid for daily use if you don't want your browsing | |
| 109 | activity tied to a bigger tech company. | |
| 110 | - [[https://onionbrowser.com/][Onion Browser]] & [[https://orbot.app/][Orbot]] - Your best bet for anonymous browsing on iOS. Onion | |
| 111 | Browser routes traffic over Tor, while Orbot can proxy other apps system-wide | |
| 112 | through Tor. Slower than normal browsers, but excellent for masking your IP | |
| 113 | and avoiding surveillance. | |
| 114 | - [[https://brave.com/][Brave]] - Privacy-focused with ad and tracker blocking built-in, Brave also runs | |
| 115 | its own private search engine and supports things like Tor tabs (on desktop, | |
| 116 | not iOS). On iOS, it's basically a privacy-enhanced Safari/WebKit shell — | |
| 117 | better than nothing, but subject to Apple's browser engine limits. | |
| 118 | - [[https://www.apple.com/safari/][Safari]] (with caveats) - Surprisingly decent for privacy if you tweak the | |
| 119 | settings. Enable “Prevent Cross-Site Tracking,” block all cookies, and disable | |
| 120 | preload for best results. Still, it's tied to your Apple ID and iCloud syncing | |
| 121 | unless you're careful, so don't treat it as anonymous. For a great baseline | |
| 122 | configuration, read PrivacyGuide's [[https://www.privacyguides.org/en/mobile-browsers/#safari-ios][Safari]] section. | |
| 123 | ||
| 124 | #+begin_quote | |
| 125 | *I use*: Hardened safari in private mode for every day use, and Onion Browser | |
| 126 | for anonymous browsing. | |
| 127 | #+end_quote | |
| 128 | ||
| 129 | * Messaging | |
| 130 | ||
| 131 | If you're trying to keep conversations off surveillance infrastructure, choosing | |
| 132 | the right messaging app is crucial. Between metadata collection, insecure cloud | |
| 133 | backups, and shady server practices, most mainstream chat apps aren't | |
| 134 | privacy-friendly by design. On iOS, you're a little more limited than on | |
| 135 | Android, but there are still solid options built around end-to-end encryption | |
| 136 | and metadata minimization. | |
| 137 | ||
| 138 | - [[https://signal.org/][Signal]] - The gold standard for secure messaging. Open source, end-to-end | |
| 139 | encrypted, and runs its own private push notification infrastructure so Apple | |
| 140 | can't read your message content. Downsides: phone number required for signup | |
| 141 | (a known metadata weak point). | |
| 142 | - [[https://simplex.chat/][SimpleX]] - A decentralized, phone-number-free messaging system. Uses anonymous | |
| 143 | message relays and asymmetric keys. Great for pseudonymous chats or if you're | |
| 144 | tired of number-based identity systems. | |
| 145 | - [[https://getsession.org/][Session]] - A fork of Signal's protocol that eliminates phone numbers entirely. | |
| 146 | Routes messages through a decentralized onion network (like Tor). Excellent | |
| 147 | for metadata resistance, though message delivery can sometimes lag. | |
| 148 | - [[https://element.io/][Element]] - Based on the Matrix protocol, offering decentralized, federated | |
| 149 | chat. Great for groups and communities, with optional end-to-end encryption. A | |
| 150 | little heavier on resources than the others. | |
| 151 | ||
| 152 | Privacy-friendly messaging isn't perfect on iOS — background sync restrictions | |
| 153 | and notification relay challenges exist — but these tools will cover most needs | |
| 154 | while keeping your data away from corporate servers. | |
| 155 | ||
| 156 | #+begin_quote | |
| 157 | *I use*: Signal for private chats with known people, and Matrix for group chats. | |
| 158 | #+end_quote | |
| 159 | ||
| 160 | * VPNs & Networking | |
| 161 | ||
| 162 | Network traffic is where most surveillance happens. Even with encrypted | |
| 163 | messaging and browsers, your IP address and DNS queries reveal a lot. A good VPN | |
| 164 | or alternative network routing tool masks this, but not all VPNs are | |
| 165 | trustworthy. Avoid “free” services or those lacking transparency. | |
| 166 | ||
| 167 | - [[https://mullvad.net/][Mullvad]] - A no-logs VPN that doesn't require an email or personal info to | |
| 168 | create an account. Consistently audited and privacy-focused. Their app is | |
| 169 | excellent on iOS. | |
| 170 | - [[https://www.torproject.org/][Tor]] - Best for anonymity rather than everyday VPN use. Routes your traffic | |
| 171 | over three relays, obscuring both source and destination. Slower, but | |
| 172 | unmatched for high-risk browsing. | |
| 173 | - [[https://yggdrasilnetwork.org/installation][Yggdrasil]] - An experimental, encrypted, peer-to-peer mesh network. Less | |
| 174 | polished for mobile but useful for hobbyists or building private networks | |
| 175 | between devices. | |
| 176 | ||
| 177 | If you can't self-host or build your own mesh, Mullvad is hands-down the | |
| 178 | cleanest option here. There are other VPN options available, but I haven't | |
| 179 | tested them all so I will simply put my vote for Mullvad here and let you | |
| 180 | research other options if you don't want to use Mullvad. | |
| 181 | ||
| 182 | #+begin_quote | |
| 183 | *I use*: Mullvad for 24/7 usage, and Tor when anonymity is required. | |
| 184 | #+end_quote | |
| 185 | ||
| 186 | * Password Management | |
| 187 | ||
| 188 | Weak, reused passwords are still one of the biggest risks for personal security. | |
| 189 | A good password manager makes it possible to use strong, unique credentials | |
| 190 | without memorizing them all. | |
| 191 | ||
| 192 | - [[https://bitwarden.com/][Bitwarden]] - Open source, audited, and free to self-host. The iOS app | |
| 193 | integrates with system autofill and Face ID. Solid for most users. | |
| 194 | - [[https://keepassium.com/][KeePassium]] - A KeePass-compatible client for iOS. Local database storage, | |
| 195 | optional cloud sync, and no external accounts. Excellent if you want full | |
| 196 | control over your credential store. | |
| 197 | - [[https://keepassxc.org/][KeePassXC]] + Syncing Solution - If you already use KeePass on desktop, sync | |
| 198 | your database with a secure method like [[https://cryptomator.org/][Cryptomator]]-protected cloud storage, | |
| 199 | Syncthing, or local-only transfers. | |
| 200 | ||
| 201 | Good password hygiene matters more than people realize, and these apps give you | |
| 202 | control over your vault. | |
| 203 | ||
| 204 | #+begin_quote | |
| 205 | *I use*: Bitwarden Families ($40/year) to protect passwords, passkeys, TOTP | |
| 206 | codes, and secure notes for my family. If I were using a solution solely for | |
| 207 | myself, I would prefer KeePassXC + Syncthing. | |
| 208 | #+end_quote | |
| 209 | ||
| 210 | * Multi-Factor Authentication (MFA) | |
| 211 | ||
| 212 | MFA is essential, but relying on SMS codes or untrusted proprietary apps defeats | |
| 213 | the point. Use open, local, encrypted authenticators where possible. | |
| 214 | ||
| 215 | - [[https://bitwarden.com/products/authenticator/][Bitwarden Authenticator]] - Integrates with the password manager or works | |
| 216 | standalone. Encrypted backups through Bitwarden. | |
| 217 | - [[https://ente.io/auth/][Ente Auth]] - Open source, end-to-end encrypted TOTP manager. Syncs encrypted | |
| 218 | via Ente's infrastructure. | |
| 219 | - [[https://www.tofuauth.com/][Tofu]] - Minimal, offline-first TOTP app. No cloud, no telemetry. | |
| 220 | - [[https://raivo-otp.com/][Raivo OTP]] - Open source, native iOS app with secure iCloud backups. Clean | |
| 221 | interface. | |
| 222 | - [[https://apps.apple.com/us/app/otp-auth/id659877384][OTP Auth]] - A longstanding, trusted TOTP manager with encrypted backups and | |
| 223 | Apple Watch support. Not open source. | |
| 224 | ||
| 225 | I recommend pairing one of these with strong passwords and a VPN for everyday | |
| 226 | security. | |
| 227 | ||
| 228 | #+begin_quote | |
| 229 | *I use*: Bitwarden Authenticator, previously OTP Auth. | |
| 230 | #+end_quote | |
| 231 | ||
| 232 | * Notes & Personal Data | |
| 233 | ||
| 234 | iCloud Notes and Google Keep aren't exactly privacy havens. If you're storing | |
| 235 | sensitive personal notes, account details, or journal entries, opt for | |
| 236 | encrypted, local-first apps. | |
| 237 | ||
| 238 | - [[https://beorgapp.com/][Beorg]] - An Org-mode-compatible outliner and task manager for iOS. Great for | |
| 239 | Emacs fans and those managing plaintext files. | |
| 240 | - [[https://obsidian.md/][Obsidian]] - A local Markdown-based notes app. All data stays on your device | |
| 241 | unless you opt for Obsidian Sync (or your own setup). | |
| 242 | - [[https://standardnotes.com/][Standard Notes]] - End-to-end encrypted notes, with cross-platform sync. Good if | |
| 243 | you want a straightforward, secure cloud service. | |
| 244 | - [[https://joplinapp.org/][Joplin]] - Open source, Markdown notes with optional encryption and cloud sync | |
| 245 | (Nextcloud, Dropbox, etc). | |
| 246 | ||
| 247 | These options help decouple your data from major cloud platforms while keeping | |
| 248 | notes portable and encrypted. | |
| 249 | ||
| 250 | #+begin_quote | |
| 251 | *I use*: Beorg, since I love org-mode and no longer use markdown. | |
| 252 | #+end_quote | |
| 253 | ||
| 254 | * Photos & Media | |
| 255 | ||
| 256 | Your camera roll quietly feeds metadata and images to iCloud by default. If you | |
| 257 | want to self-host or encrypt your photo library, here's what works on iOS. At a | |
| 258 | minimum, I suggest disabling iCloud for the Photos app, so the data stays local | |
| 259 | on your device. | |
| 260 | ||
| 261 | - [[https://immich.app/][Immich (self-hosted)]] - Open source, feature-rich, self-hosted photo manager | |
| 262 | with facial recognition and live photo support. Requires a home server. | |
| 263 | - [[https://ente.io/][Ente Photos]] - End-to-end encrypted photo storage with iOS and web apps. Paid | |
| 264 | plans, but privacy-first infrastructure. | |
| 265 | ||
| 266 | Good privacy photos apps are rare on iOS — these two are the standout options | |
| 267 | right now. | |
| 268 | ||
| 269 | #+begin_quote | |
| 270 | *I use*: Immich for all photos. | |
| 271 | #+end_quote | |
| 272 | ||
| 273 | * Encryption Utilities | |
| 274 | ||
| 275 | If you're handling sensitive files, you need a proper encryption utility to lock | |
| 276 | them down. | |
| 277 | ||
| 278 | - [[https://cryptomator.org/][Cryptomator]] - Open source, encrypted cloud storage vaults. Integrates with | |
| 279 | most cloud providers and works locally. | |
| 280 | - [[https://apps.apple.com/us/app/instant-pgp/id1497433694][Instant PGP]] - PGP key generation, import/export, and encrypted message/file | |
| 281 | creation. Handy for old-school secure comms. | |
| 282 | ||
| 283 | If you're serious about privacy, encrypted storage and messaging layers like | |
| 284 | these are essential. | |
| 285 | ||
| 286 | #+begin_quote | |
| 287 | *I use*: Cryptomator when syncing sensitive data over Syncthing. I no longer | |
| 288 | require Instant PGP since Migadu's webmail client (SnappyMail) supports PGP. | |
| 289 | #+end_quote | |
| 290 | ||
| 291 | * News & Social | |
| 292 | ||
| 293 | Mainstream news and social apps leak all kinds of usage metadata, even when | |
| 294 | you're just lurking. These tools let you follow content with less exposure. | |
| 295 | ||
| 296 | - [[https://netnewswire.com/][NetNewsWire]] - Free, open source RSS reader for iOS. Follow sites without | |
| 297 | tracking. | |
| 298 | - [[https://www.talklittle.com/three-cheers/][ThreeCheers]] - Privacy-friendly Reddit client for iOS. No official API calls, | |
| 299 | built-in filtering. | |
| 300 | - [[https://getvoyager.app/][Voyager]] - Clean, independent Mastodon client. | |
| 301 | - [[https://joinmastodon.org/][Mastodon]] - Federated, open source alternative to Twitter. | |
| 302 | - [[https://joinpeertube.org/][PeerTube]] - Decentralized video platform, accessible via web or PWA. | |
| 303 | - [[https://pixelfed.org/][Pixelfed]] - Federated, open source alternative to Instagram. | |
| 304 | ||
| 305 | If you're going to be online, at least let it be on your terms. | |
| 306 | ||
| 307 | #+begin_quote | |
| 308 | *I use*: NetNewsWire (via FreshRSS) for RSS feeds, and Voyager for Lemmy. I have | |
| 309 | used all of these apps and they are great, but I am not very active on social | |
| 310 | sites. | |
| 311 | #+end_quote | |
| 312 | ||
| 313 | * Final Thoughts | |
| 314 | ||
| 315 | This isn't about paranoia — it's about awareness. Every app you use, every | |
| 316 | service you sign into, quietly collects and trades your data. iOS makes true | |
| 317 | anonymity harder than other platforms, but these tools and services give you a | |
| 318 | fighting chance to keep your personal life personal. | |
| 319 | ||
| 320 | If you have other privacy-friendly iOS tools you enjoy, [[mailto:hello@cleberg.net][email me]] — I'm always | |
| 321 | looking for new things to test. | |
theme/templates/index.html +6 −6
| @@ -9,6 +9,12 @@ sub rsa4096 2022-11-16 [E]</pre> | ||
| 9 | 9 | <section> |
| 10 | 10 | <h2>Recent Blog Posts</h2> |
| 11 | 11 | |
| 12 | ||
| 13 | <div class="post"> | |
| 14 | <time datetime="2025-06-02 15:26:05">2025-06-02</time> | |
| 15 | <a href="/blog/private-ios-apps.html">Privacy-Friendly iOS Apps for the Paranoid Minimalist</a> | |
| 16 | </div> | |
| 17 | ||
| 12 | 18 | <div class="post"> |
| 13 | 19 | <time datetime="2025-05-30 10:53:28">2025-05-30</time> |
| 14 | 20 | <a href="/blog/it-audit-career.html">Future-Proof Your Audit Career: Emerging Technologies</a> |
| @@ -20,12 +26,6 @@ sub rsa4096 2022-11-16 [E]</pre> | ||
| 20 | 26 | Macbook Pro 16"</a> |
| 21 | 27 | </div> |
| 22 | 28 | |
| 23 | <div class="post"> | |
| 24 | <time datetime="2025-04-05 23:04:54">2025-04-05</time> | |
| 25 | <a href="/blog/git-mirror.html">Mirroring my Repositories from GitHub to | |
| 26 | GitLab</a> | |
| 27 | </div> | |
| 28 | ||
| 29 | 29 | <br /> |
| 30 | 30 | <a href="/blog/">All Posts →</a> |
| 31 | 31 | </section> |