f7d59771d8 · cmc/cleberg.net

1

#+date: <2025-06-03 Tue 11:38:40>

2

#+title: Privacy-Friendly iOS Apps for the Paranoid Minimalist

3

#+description: If you're a privacy nerd with an iPhone, this one's for you. A hand-picked list of iOS apps and resources to help you stay secure and ditch the data grabs.

4

#+filetags: :privacy:ios:

5

#+slug: private-ios-apps

6

7

In a world where our phones are extensions of ourselves, balancing convenience

8

with privacy can feel like a losing battle — especially on iOS, where platform

9

restrictions narrow the options. But it's not impossible. There's a growing

10

ecosystem of privacy-respecting apps, tools, and communities focused on helping

11

iPhone users take back some control.

12

13

Below is a curated list of privacy resources, directories, and testing tools

14

specifically useful for iOS. Whether you're looking for a better email client, a

15

trustworthy VPN, or simply places to learn more, these links are a solid

16

starting point.

17

18

**Resource Table**

19

20

| Name | Type |

21

|----------------------------------------+-----------------------------|

22

| [[https://github.com/pluja/awesome-privacy][Awesome Privacy]]                        | App Lists & Directories     |

23

| [[https://www.privacyguides.org/en/os/ios-overview/][PrivacyGuides.org]]                      | App Lists & Directories     |

24

| [[https://cyberinsider.com/][CyberInsider]]                           | Guides & Educational        |

25

| [[https://ssd.eff.org/module-categories/further-learning][EFF Surveillance Self-Defense]]          | Guides & Educational        |

26

| [[https://osintframework.com/][OSINT Framework]]                        | Guides & Educational        |

27

| [[https://securityplanner.consumerreports.org/][Security Planner (Consumer Reports)]]    | Guides & Educational        |

28

| [[https://discuss.privacyguides.net/][PrivacyGuides Forum]]                    | Community & Discussion      |

29

| [[https://www.reddit.com/r/privacy/][r/Privacy]]                              | Community & Discussion      |

30

| [[https://www.reddit.com/r/iosprivacy/][r/iOSPrivacy]]                           | Community & Discussion      |

31

| [[https://tosdr.org/en/][Terms of Service; Didn't Read (ToS;DR)]] | Policy & Transparency Tools |

32

| [[https://browserleaks.com][BrowserLeaks.com]]                       | Privacy Testing & Tools     |

33

| [[https://mullvad.net/check][Mullvad Privacy Check]]                  | Privacy Testing & Tools     |

34

| [[https://support.apple.com/en-us/HT212025][iOS App Privacy Report (Settings)]]      | Privacy Testing & Tools     |

35

| [[https://privacytests.org/][PrivacyTests.org]]                       | Privacy Testing & Tools     |

36

37

#+begin_quote

38

*Note*: This list focuses solely on iOS-compatible resources and tools. No

39

Android comparisons here — just options for those of us living in Apple's walled

40

garden.

41

#+end_quote

42

43

* Email

44

45

First and foremost, I like to consider email as my first app on a new device.

46

However, the iOS market lacks a wealth of open-source and private email clients.

47

There are a few options, such as Proton Mail and Tuta, which are open source and

48

private, but they lock you into their ecosystem. Tuta doesn't allow for custom

49

domains and neither allows SMTP/IMAP access.

50

51

Canary Mail is a decent option, as it is a classic SMTP/IMAP client - and does

52

more than most as it's one of the only PGP email clients on iOS - but is closed

53

source and the company behind it seems more focused on AI than privacy.

54

55

- [[https://proton.me/mail][Proton Mail]] - A more mainstream-feeling app with PGP support built-in. Good if

56

you're looking for something that feels like Apple Mail but with privacy

57

upgrades.

58

- [[https://tuta.com/][Tuta]] - Tuta (formerly Tutanota) takes privacy a step further by encrypting

59

subject lines, message content, attachments, and calendar events. It also

60

avoids using phone numbers or third-party services for registration. The iOS

61

app is reliable for the basics. Downsides: no IMAP/SMTP support, so you can't

62

plug it into your own mail clients, and notifications require a premium plan

63

if you want them in real-time. Great if you care about metadata exposure.

64

- [[https://canarymail.io/][Canary Mail]] - A more polished, user-friendly email client that supports

65

end-to-end encryption using PGP and their own “SecureSend” feature for

66

encrypted messages. Canary works with multiple mail providers (Gmail, Outlook,

67

etc.), so it's more of a privacy enhancement for existing services rather than

68

a private mail provider itself. Downsides: it's a proprietary, closed-source

69

app, and some privacy features require a subscription. Better than stock Mail

70

for security, but you're still trusting their implementation.

71

72

Another suggestion is to use a browser-based web client. You can install browser

73

mail clients as progressive web apps (PWAs). For example, I have been using

74

[[https://webmail.migadu.com][webmail.migadu.com]] as a progressive email app for a while now and it works great

75

for my purposes.

76

77

This allows for access to your email without installing an application that

78

access native APIs or other potential data sources you may be concerned about.

79

This is especially important if you're concerned about allowing permissions to

80

device APIs, non-reproducible buils from the App Store, or mobile device

81

fingerprints.

82

83

Lastly, [[https://blog.thunderbird.net/2025/05/thunderbird-for-mobile-april-2025-progress-report/][Thunderbird iOS]] is under development. Keep an eye out for an alpha or

84

beta release later in 2025 or early 2026. I have a feeling that once Thunderbird

85

iOS is available, it will easily become the best option for email on iOS.

86

87

#+begin_quote

88

*I use*: Web-based email on iOS and Thunderbird on my desktop. Once Thunderbird

89

releases for iOS, I will probably use that.

90

#+end_quote

91

92

* Browsers

93

94

Your browser is basically the front door to the internet — and also the window,

95

mailbox, and security camera. It's where trackers, ads, fingerprinting scripts,

96

and data leaks happen most often. Even on a locked-down phone, if your browser

97

isn't protecting your traffic, your personal info can quietly leak out through

98

third-party scripts, embedded media, and background connections. Choosing a

99

privacy-respecting browser is one of the most impactful decisions you can make

100

for mobile privacy.

101

102

- [[https://apps.apple.com/us/app/firefox-focus-privacy-browser/id1055677337][Firefox Focus]] - A stripped-down, no-nonsense browser from Mozilla. It

103

automatically blocks trackers, erases your browsing history with a tap, and

104

skips extras like tabs or bookmarks. Great for one-off searches and quick

105

visits to privacy-sensitive sites.

106

- [[https://duckduckgo.com/app][DuckDuckGo]] - A full-featured private browser with built-in tracker blocking,

107

HTTPS upgrades, and a clear data button. It also integrates DuckDuckGo search

108

and email protection. Solid for daily use if you don't want your browsing

109

activity tied to a bigger tech company.

110

- [[https://onionbrowser.com/][Onion Browser]] & [[https://orbot.app/][Orbot]] - Your best bet for anonymous browsing on iOS. Onion

111

Browser routes traffic over Tor, while Orbot can proxy other apps system-wide

112

through Tor. Slower than normal browsers, but excellent for masking your IP

113

and avoiding surveillance.

114

- [[https://brave.com/][Brave]] - Privacy-focused with ad and tracker blocking built-in, Brave also runs

115

its own private search engine and supports things like Tor tabs (on desktop,

116

not iOS). On iOS, it's basically a privacy-enhanced Safari/WebKit shell —

117

better than nothing, but subject to Apple's browser engine limits.

118

- [[https://www.apple.com/safari/][Safari]] (with caveats) - Surprisingly decent for privacy if you tweak the

119

  settings. Enable “Prevent Cross-Site Tracking,” block all cookies, and disable

120

preload for best results. Still, it's tied to your Apple ID and iCloud syncing

121

unless you're careful, so don't treat it as anonymous. For a great baseline

122

  configuration, read PrivacyGuide's [[https://www.privacyguides.org/en/mobile-browsers/#safari-ios][Safari]] section.

123

124

#+begin_quote

125

*I use*: Hardened safari in private mode for every day use, and Onion Browser

126

for anonymous browsing.

127

#+end_quote

128

129

* Messaging

130

131

If you're trying to keep conversations off surveillance infrastructure, choosing

132

the right messaging app is crucial. Between metadata collection, insecure cloud

133

backups, and shady server practices, most mainstream chat apps aren't

134

privacy-friendly by design. On iOS, you're a little more limited than on

135

Android, but there are still solid options built around end-to-end encryption

136

and metadata minimization.

137

138

- [[https://signal.org/][Signal]] - The gold standard for secure messaging. Open source, end-to-end

139

encrypted, and runs its own private push notification infrastructure so Apple

140

can't read your message content. Downsides: phone number required for signup

141

(a known metadata weak point).

142

- [[https://simplex.chat/][SimpleX]] - A decentralized, phone-number-free messaging system. Uses anonymous

143

message relays and asymmetric keys. Great for pseudonymous chats or if you're

144

tired of number-based identity systems.

145

- [[https://getsession.org/][Session]] - A fork of Signal's protocol that eliminates phone numbers entirely.

146

Routes messages through a decentralized onion network (like Tor). Excellent

147

for metadata resistance, though message delivery can sometimes lag.

148

- [[https://element.io/][Element]] - Based on the Matrix protocol, offering decentralized, federated

149

chat. Great for groups and communities, with optional end-to-end encryption. A

150

little heavier on resources than the others.

151

152

Privacy-friendly messaging isn't perfect on iOS — background sync restrictions

153

and notification relay challenges exist — but these tools will cover most needs

154

while keeping your data away from corporate servers.

155

156

#+begin_quote

157

*I use*: Signal for private chats with known people, and Matrix for group chats.

158

#+end_quote

159

160

* VPNs & Networking

161

162

Network traffic is where most surveillance happens. Even with encrypted

163

messaging and browsers, your IP address and DNS queries reveal a lot. A good VPN

164

or alternative network routing tool masks this, but not all VPNs are

165

trustworthy. Avoid “free” services or those lacking transparency.

166

167

- [[https://mullvad.net/][Mullvad]] - A no-logs VPN that doesn't require an email or personal info to

168

create an account. Consistently audited and privacy-focused. Their app is

169

excellent on iOS.

170

- [[https://www.torproject.org/][Tor]] - Best for anonymity rather than everyday VPN use. Routes your traffic

171

over three relays, obscuring both source and destination. Slower, but

172

unmatched for high-risk browsing.

173

- [[https://yggdrasilnetwork.org/installation][Yggdrasil]] - An experimental, encrypted, peer-to-peer mesh network. Less

174

polished for mobile but useful for hobbyists or building private networks

175

between devices.

176

177

If you can't self-host or build your own mesh, Mullvad is hands-down the

178

cleanest option here. There are other VPN options available, but I haven't

179

tested them all so I will simply put my vote for Mullvad here and let you

180

research other options if you don't want to use Mullvad.

181

182

#+begin_quote

183

*I use*: Mullvad for 24/7 usage, and Tor when anonymity is required.

184

#+end_quote

185

186

* Password Management

187

188

Weak, reused passwords are still one of the biggest risks for personal security.

189

A good password manager makes it possible to use strong, unique credentials

190

without memorizing them all.

191

192

- [[https://bitwarden.com/][Bitwarden]] - Open source, audited, and free to self-host. The iOS app

193

integrates with system autofill and Face ID. Solid for most users.

194

- [[https://keepassium.com/][KeePassium]] - A KeePass-compatible client for iOS. Local database storage,

195

optional cloud sync, and no external accounts. Excellent if you want full

196

control over your credential store.

197

- [[https://keepassxc.org/][KeePassXC]] + Syncing Solution - If you already use KeePass on desktop, sync

198

  your database with a secure method like [[https://cryptomator.org/][Cryptomator]]-protected cloud storage,

199

Syncthing, or local-only transfers.

200

201

Good password hygiene matters more than people realize, and these apps give you

202

control over your vault.

203

204

#+begin_quote

205

*I use*: Bitwarden Families ($40/year) to protect passwords, passkeys, TOTP

206

codes, and secure notes for my family. If I were using a solution solely for

207

myself, I would prefer KeePassXC + Syncthing.

208

#+end_quote

209

210

* Multi-Factor Authentication (MFA)

211

212

MFA is essential, but relying on SMS codes or untrusted proprietary apps defeats

213

the point. Use open, local, encrypted authenticators where possible.

214

215

- [[https://bitwarden.com/products/authenticator/][Bitwarden Authenticator]] - Integrates with the password manager or works

216

standalone. Encrypted backups through Bitwarden.

217

- [[https://ente.io/auth/][Ente Auth]] - Open source, end-to-end encrypted TOTP manager. Syncs encrypted

218

via Ente's infrastructure.

219

- [[https://www.tofuauth.com/][Tofu]] - Minimal, offline-first TOTP app. No cloud, no telemetry.

220

- [[https://raivo-otp.com/][Raivo OTP]] - Open source, native iOS app with secure iCloud backups. Clean

221

interface.

222

- [[https://apps.apple.com/us/app/otp-auth/id659877384][OTP Auth]] - A longstanding, trusted TOTP manager with encrypted backups and

223

Apple Watch support. Not open source.

224

225

I recommend pairing one of these with strong passwords and a VPN for everyday

226

security.

227

228

#+begin_quote

229

*I use*: Bitwarden Authenticator, previously OTP Auth.

230

#+end_quote

231

232

* Notes & Personal Data

233

234

iCloud Notes and Google Keep aren't exactly privacy havens. If you're storing

235

sensitive personal notes, account details, or journal entries, opt for

236

encrypted, local-first apps.

237

238

- [[https://beorgapp.com/][Beorg]] - An Org-mode-compatible outliner and task manager for iOS. Great for

239

Emacs fans and those managing plaintext files.

240

- [[https://obsidian.md/][Obsidian]] - A local Markdown-based notes app. All data stays on your device

241

unless you opt for Obsidian Sync (or your own setup).

242

- [[https://standardnotes.com/][Standard Notes]] - End-to-end encrypted notes, with cross-platform sync. Good if

243

you want a straightforward, secure cloud service.

244

- [[https://joplinapp.org/][Joplin]] - Open source, Markdown notes with optional encryption and cloud sync

245

(Nextcloud, Dropbox, etc).

246

247

These options help decouple your data from major cloud platforms while keeping

248

notes portable and encrypted.

249

250

#+begin_quote

251

*I use*: Beorg, since I love org-mode and no longer use markdown.

252

#+end_quote

253

254

* Photos & Media

255

256

Your camera roll quietly feeds metadata and images to iCloud by default. If you

257

want to self-host or encrypt your photo library, here's what works on iOS. At a

258

minimum, I suggest disabling iCloud for the Photos app, so the data stays local

259

on your device.

260

261

- [[https://immich.app/][Immich (self-hosted)]] - Open source, feature-rich, self-hosted photo manager

262

with facial recognition and live photo support. Requires a home server.

263

- [[https://ente.io/][Ente Photos]] - End-to-end encrypted photo storage with iOS and web apps. Paid

264

plans, but privacy-first infrastructure.

265

266

Good privacy photos apps are rare on iOS — these two are the standout options

267

right now.

268

269

#+begin_quote

270

*I use*: Immich for all photos.

271

#+end_quote

272

273

* Encryption Utilities

274

275

If you're handling sensitive files, you need a proper encryption utility to lock

276

them down.

277

278

- [[https://cryptomator.org/][Cryptomator]] - Open source, encrypted cloud storage vaults. Integrates with

279

most cloud providers and works locally.

280

- [[https://apps.apple.com/us/app/instant-pgp/id1497433694][Instant PGP]] - PGP key generation, import/export, and encrypted message/file

281

creation. Handy for old-school secure comms.

282

283

If you're serious about privacy, encrypted storage and messaging layers like

284

these are essential.

285

286

#+begin_quote

287

*I use*: Cryptomator when syncing sensitive data over Syncthing. I no longer

288

require Instant PGP since Migadu's webmail client (SnappyMail) supports PGP.

289

#+end_quote

290

291

* News & Social

292

293

Mainstream news and social apps leak all kinds of usage metadata, even when

294

you're just lurking. These tools let you follow content with less exposure.

295

296

- [[https://netnewswire.com/][NetNewsWire]] - Free, open source RSS reader for iOS. Follow sites without

297

tracking.

298

- [[https://www.talklittle.com/three-cheers/][ThreeCheers]] - Privacy-friendly Reddit client for iOS. No official API calls,

299

built-in filtering.

300

- [[https://getvoyager.app/][Voyager]] - Clean, independent Mastodon client.

301

- [[https://joinmastodon.org/][Mastodon]] - Federated, open source alternative to Twitter.

302

- [[https://joinpeertube.org/][PeerTube]] - Decentralized video platform, accessible via web or PWA.

303

- [[https://pixelfed.org/][Pixelfed]] - Federated, open source alternative to Instagram.

304

305

If you're going to be online, at least let it be on your terms.

306

307

#+begin_quote

308

*I use*: NetNewsWire (via FreshRSS) for RSS feeds, and Voyager for Lemmy. I have

309

used all of these apps and they are great, but I am not very active on social

310

sites.

311

#+end_quote

312

313

* Final Thoughts

314

315

This isn't about paranoia — it's about awareness. Every app you use, every

316

service you sign into, quietly collects and trades your data. iOS makes true

317

anonymity harder than other platforms, but these tools and services give you a

318

fighting chance to keep your personal life personal.

319

320

If you have other privacy-friendly iOS tools you enjoy, [[mailto:hello@cleberg.net][email me]] — I'm always

321

looking for new things to test.

@@ -0,0 +1,321 @@
	1	#+date: <2025-06-03 Tue 11:38:40>
	2	#+title: Privacy-Friendly iOS Apps for the Paranoid Minimalist
	3	#+description: If you're a privacy nerd with an iPhone, this one's for you. A hand-picked list of iOS apps and resources to help you stay secure and ditch the data grabs.
	4	#+filetags: :privacy:ios:
	5	#+slug: private-ios-apps
	6
	7	In a world where our phones are extensions of ourselves, balancing convenience
	8	with privacy can feel like a losing battle — especially on iOS, where platform
	9	restrictions narrow the options. But it's not impossible. There's a growing
	10	ecosystem of privacy-respecting apps, tools, and communities focused on helping
	11	iPhone users take back some control.
	12
	13	Below is a curated list of privacy resources, directories, and testing tools
	14	specifically useful for iOS. Whether you're looking for a better email client, a
	15	trustworthy VPN, or simply places to learn more, these links are a solid
	16	starting point.
	17
	18	Resource Table
	19
	20	\| Name \| Type \|
	21	\|----------------------------------------+-----------------------------\|
	22	\| [[https://github.com/pluja/awesome-privacy][Awesome Privacy]] \| App Lists & Directories \|
	23	\| [[https://www.privacyguides.org/en/os/ios-overview/][PrivacyGuides.org]] \| App Lists & Directories \|
	24	\| [[https://cyberinsider.com/][CyberInsider]] \| Guides & Educational \|
	25	\| [[https://ssd.eff.org/module-categories/further-learning][EFF Surveillance Self-Defense]] \| Guides & Educational \|
	26	\| [[https://osintframework.com/][OSINT Framework]] \| Guides & Educational \|
	27	\| [[https://securityplanner.consumerreports.org/][Security Planner (Consumer Reports)]] \| Guides & Educational \|
	28	\| [[https://discuss.privacyguides.net/][PrivacyGuides Forum]] \| Community & Discussion \|
	29	\| [[https://www.reddit.com/r/privacy/][r/Privacy]] \| Community & Discussion \|
	30	\| [[https://www.reddit.com/r/iosprivacy/][r/iOSPrivacy]] \| Community & Discussion \|
	31	\| [[https://tosdr.org/en/][Terms of Service; Didn't Read (ToS;DR)]] \| Policy & Transparency Tools \|
	32	\| [[https://browserleaks.com][BrowserLeaks.com]] \| Privacy Testing & Tools \|
	33	\| [[https://mullvad.net/check][Mullvad Privacy Check]] \| Privacy Testing & Tools \|
	34	\| [[https://support.apple.com/en-us/HT212025][iOS App Privacy Report (Settings)]] \| Privacy Testing & Tools \|
	35	\| [[https://privacytests.org/][PrivacyTests.org]] \| Privacy Testing & Tools \|
	36
	37	#+begin_quote
	38	Note: This list focuses solely on iOS-compatible resources and tools. No
	39	Android comparisons here — just options for those of us living in Apple's walled
	40	garden.
	41	#+end_quote
	42
	43	* Email
	44
	45	First and foremost, I like to consider email as my first app on a new device.
	46	However, the iOS market lacks a wealth of open-source and private email clients.
	47	There are a few options, such as Proton Mail and Tuta, which are open source and
	48	private, but they lock you into their ecosystem. Tuta doesn't allow for custom
	49	domains and neither allows SMTP/IMAP access.
	50
	51	Canary Mail is a decent option, as it is a classic SMTP/IMAP client - and does
	52	more than most as it's one of the only PGP email clients on iOS - but is closed
	53	source and the company behind it seems more focused on AI than privacy.
	54
	55	- [[https://proton.me/mail][Proton Mail]] - A more mainstream-feeling app with PGP support built-in. Good if
	56	you're looking for something that feels like Apple Mail but with privacy
	57	upgrades.
	58	- [[https://tuta.com/][Tuta]] - Tuta (formerly Tutanota) takes privacy a step further by encrypting
	59	subject lines, message content, attachments, and calendar events. It also
	60	avoids using phone numbers or third-party services for registration. The iOS
	61	app is reliable for the basics. Downsides: no IMAP/SMTP support, so you can't
	62	plug it into your own mail clients, and notifications require a premium plan
	63	if you want them in real-time. Great if you care about metadata exposure.
	64	- [[https://canarymail.io/][Canary Mail]] - A more polished, user-friendly email client that supports
	65	end-to-end encryption using PGP and their own “SecureSend” feature for
	66	encrypted messages. Canary works with multiple mail providers (Gmail, Outlook,
	67	etc.), so it's more of a privacy enhancement for existing services rather than
	68	a private mail provider itself. Downsides: it's a proprietary, closed-source
	69	app, and some privacy features require a subscription. Better than stock Mail
	70	for security, but you're still trusting their implementation.
	71
	72	Another suggestion is to use a browser-based web client. You can install browser
	73	mail clients as progressive web apps (PWAs). For example, I have been using
	74	[[https://webmail.migadu.com][webmail.migadu.com]] as a progressive email app for a while now and it works great
	75	for my purposes.
	76
	77	This allows for access to your email without installing an application that
	78	access native APIs or other potential data sources you may be concerned about.
	79	This is especially important if you're concerned about allowing permissions to
	80	device APIs, non-reproducible buils from the App Store, or mobile device
	81	fingerprints.
	82
	83	Lastly, [[https://blog.thunderbird.net/2025/05/thunderbird-for-mobile-april-2025-progress-report/][Thunderbird iOS]] is under development. Keep an eye out for an alpha or
	84	beta release later in 2025 or early 2026. I have a feeling that once Thunderbird
	85	iOS is available, it will easily become the best option for email on iOS.
	86
	87	#+begin_quote
	88	I use: Web-based email on iOS and Thunderbird on my desktop. Once Thunderbird
	89	releases for iOS, I will probably use that.
	90	#+end_quote
	91
	92	* Browsers
	93
	94	Your browser is basically the front door to the internet — and also the window,
	95	mailbox, and security camera. It's where trackers, ads, fingerprinting scripts,
	96	and data leaks happen most often. Even on a locked-down phone, if your browser
	97	isn't protecting your traffic, your personal info can quietly leak out through
	98	third-party scripts, embedded media, and background connections. Choosing a
	99	privacy-respecting browser is one of the most impactful decisions you can make
	100	for mobile privacy.
	101
	102	- [[https://apps.apple.com/us/app/firefox-focus-privacy-browser/id1055677337][Firefox Focus]] - A stripped-down, no-nonsense browser from Mozilla. It
	103	automatically blocks trackers, erases your browsing history with a tap, and
	104	skips extras like tabs or bookmarks. Great for one-off searches and quick
	105	visits to privacy-sensitive sites.
	106	- [[https://duckduckgo.com/app][DuckDuckGo]] - A full-featured private browser with built-in tracker blocking,
	107	HTTPS upgrades, and a clear data button. It also integrates DuckDuckGo search
	108	and email protection. Solid for daily use if you don't want your browsing
	109	activity tied to a bigger tech company.
	110	- [[https://onionbrowser.com/][Onion Browser]] & [[https://orbot.app/][Orbot]] - Your best bet for anonymous browsing on iOS. Onion
	111	Browser routes traffic over Tor, while Orbot can proxy other apps system-wide
	112	through Tor. Slower than normal browsers, but excellent for masking your IP
	113	and avoiding surveillance.
	114	- [[https://brave.com/][Brave]] - Privacy-focused with ad and tracker blocking built-in, Brave also runs
	115	its own private search engine and supports things like Tor tabs (on desktop,
	116	not iOS). On iOS, it's basically a privacy-enhanced Safari/WebKit shell —
	117	better than nothing, but subject to Apple's browser engine limits.
	118	- [[https://www.apple.com/safari/][Safari]] (with caveats) - Surprisingly decent for privacy if you tweak the
	119	settings. Enable “Prevent Cross-Site Tracking,” block all cookies, and disable
	120	preload for best results. Still, it's tied to your Apple ID and iCloud syncing
	121	unless you're careful, so don't treat it as anonymous. For a great baseline
	122	configuration, read PrivacyGuide's [[https://www.privacyguides.org/en/mobile-browsers/#safari-ios][Safari]] section.
	123
	124	#+begin_quote
	125	I use: Hardened safari in private mode for every day use, and Onion Browser
	126	for anonymous browsing.
	127	#+end_quote
	128
	129	* Messaging
	130
	131	If you're trying to keep conversations off surveillance infrastructure, choosing
	132	the right messaging app is crucial. Between metadata collection, insecure cloud
	133	backups, and shady server practices, most mainstream chat apps aren't
	134	privacy-friendly by design. On iOS, you're a little more limited than on
	135	Android, but there are still solid options built around end-to-end encryption
	136	and metadata minimization.
	137
	138	- [[https://signal.org/][Signal]] - The gold standard for secure messaging. Open source, end-to-end
	139	encrypted, and runs its own private push notification infrastructure so Apple
	140	can't read your message content. Downsides: phone number required for signup
	141	(a known metadata weak point).
	142	- [[https://simplex.chat/][SimpleX]] - A decentralized, phone-number-free messaging system. Uses anonymous
	143	message relays and asymmetric keys. Great for pseudonymous chats or if you're
	144	tired of number-based identity systems.
	145	- [[https://getsession.org/][Session]] - A fork of Signal's protocol that eliminates phone numbers entirely.
	146	Routes messages through a decentralized onion network (like Tor). Excellent
	147	for metadata resistance, though message delivery can sometimes lag.
	148	- [[https://element.io/][Element]] - Based on the Matrix protocol, offering decentralized, federated
	149	chat. Great for groups and communities, with optional end-to-end encryption. A
	150	little heavier on resources than the others.
	151
	152	Privacy-friendly messaging isn't perfect on iOS — background sync restrictions
	153	and notification relay challenges exist — but these tools will cover most needs
	154	while keeping your data away from corporate servers.
	155
	156	#+begin_quote
	157	I use: Signal for private chats with known people, and Matrix for group chats.
	158	#+end_quote
	159
	160	* VPNs & Networking
	161
	162	Network traffic is where most surveillance happens. Even with encrypted
	163	messaging and browsers, your IP address and DNS queries reveal a lot. A good VPN
	164	or alternative network routing tool masks this, but not all VPNs are
	165	trustworthy. Avoid “free” services or those lacking transparency.
	166
	167	- [[https://mullvad.net/][Mullvad]] - A no-logs VPN that doesn't require an email or personal info to
	168	create an account. Consistently audited and privacy-focused. Their app is
	169	excellent on iOS.
	170	- [[https://www.torproject.org/][Tor]] - Best for anonymity rather than everyday VPN use. Routes your traffic
	171	over three relays, obscuring both source and destination. Slower, but
	172	unmatched for high-risk browsing.
	173	- [[https://yggdrasilnetwork.org/installation][Yggdrasil]] - An experimental, encrypted, peer-to-peer mesh network. Less
	174	polished for mobile but useful for hobbyists or building private networks
	175	between devices.
	176
	177	If you can't self-host or build your own mesh, Mullvad is hands-down the
	178	cleanest option here. There are other VPN options available, but I haven't
	179	tested them all so I will simply put my vote for Mullvad here and let you
	180	research other options if you don't want to use Mullvad.
	181
	182	#+begin_quote
	183	I use: Mullvad for 24/7 usage, and Tor when anonymity is required.
	184	#+end_quote
	185
	186	* Password Management
	187
	188	Weak, reused passwords are still one of the biggest risks for personal security.
	189	A good password manager makes it possible to use strong, unique credentials
	190	without memorizing them all.
	191
	192	- [[https://bitwarden.com/][Bitwarden]] - Open source, audited, and free to self-host. The iOS app
	193	integrates with system autofill and Face ID. Solid for most users.
	194	- [[https://keepassium.com/][KeePassium]] - A KeePass-compatible client for iOS. Local database storage,
	195	optional cloud sync, and no external accounts. Excellent if you want full
	196	control over your credential store.
	197	- [[https://keepassxc.org/][KeePassXC]] + Syncing Solution - If you already use KeePass on desktop, sync
	198	your database with a secure method like [[https://cryptomator.org/][Cryptomator]]-protected cloud storage,
	199	Syncthing, or local-only transfers.
	200
	201	Good password hygiene matters more than people realize, and these apps give you
	202	control over your vault.
	203
	204	#+begin_quote
	205	I use: Bitwarden Families ($40/year) to protect passwords, passkeys, TOTP
	206	codes, and secure notes for my family. If I were using a solution solely for
	207	myself, I would prefer KeePassXC + Syncthing.
	208	#+end_quote
	209
	210	* Multi-Factor Authentication (MFA)
	211
	212	MFA is essential, but relying on SMS codes or untrusted proprietary apps defeats
	213	the point. Use open, local, encrypted authenticators where possible.
	214
	215	- [[https://bitwarden.com/products/authenticator/][Bitwarden Authenticator]] - Integrates with the password manager or works
	216	standalone. Encrypted backups through Bitwarden.
	217	- [[https://ente.io/auth/][Ente Auth]] - Open source, end-to-end encrypted TOTP manager. Syncs encrypted
	218	via Ente's infrastructure.
	219	- [[https://www.tofuauth.com/][Tofu]] - Minimal, offline-first TOTP app. No cloud, no telemetry.
	220	- [[https://raivo-otp.com/][Raivo OTP]] - Open source, native iOS app with secure iCloud backups. Clean
	221	interface.
	222	- [[https://apps.apple.com/us/app/otp-auth/id659877384][OTP Auth]] - A longstanding, trusted TOTP manager with encrypted backups and
	223	Apple Watch support. Not open source.
	224
	225	I recommend pairing one of these with strong passwords and a VPN for everyday
	226	security.
	227
	228	#+begin_quote
	229	I use: Bitwarden Authenticator, previously OTP Auth.
	230	#+end_quote
	231
	232	* Notes & Personal Data
	233
	234	iCloud Notes and Google Keep aren't exactly privacy havens. If you're storing
	235	sensitive personal notes, account details, or journal entries, opt for
	236	encrypted, local-first apps.
	237
	238	- [[https://beorgapp.com/][Beorg]] - An Org-mode-compatible outliner and task manager for iOS. Great for
	239	Emacs fans and those managing plaintext files.
	240	- [[https://obsidian.md/][Obsidian]] - A local Markdown-based notes app. All data stays on your device
	241	unless you opt for Obsidian Sync (or your own setup).
	242	- [[https://standardnotes.com/][Standard Notes]] - End-to-end encrypted notes, with cross-platform sync. Good if
	243	you want a straightforward, secure cloud service.
	244	- [[https://joplinapp.org/][Joplin]] - Open source, Markdown notes with optional encryption and cloud sync
	245	(Nextcloud, Dropbox, etc).
	246
	247	These options help decouple your data from major cloud platforms while keeping
	248	notes portable and encrypted.
	249
	250	#+begin_quote
	251	I use: Beorg, since I love org-mode and no longer use markdown.
	252	#+end_quote
	253
	254	* Photos & Media
	255
	256	Your camera roll quietly feeds metadata and images to iCloud by default. If you
	257	want to self-host or encrypt your photo library, here's what works on iOS. At a
	258	minimum, I suggest disabling iCloud for the Photos app, so the data stays local
	259	on your device.
	260
	261	- [[https://immich.app/][Immich (self-hosted)]] - Open source, feature-rich, self-hosted photo manager
	262	with facial recognition and live photo support. Requires a home server.
	263	- [[https://ente.io/][Ente Photos]] - End-to-end encrypted photo storage with iOS and web apps. Paid
	264	plans, but privacy-first infrastructure.
	265
	266	Good privacy photos apps are rare on iOS — these two are the standout options
	267	right now.
	268
	269	#+begin_quote
	270	I use: Immich for all photos.
	271	#+end_quote
	272
	273	* Encryption Utilities
	274
	275	If you're handling sensitive files, you need a proper encryption utility to lock
	276	them down.
	277
	278	- [[https://cryptomator.org/][Cryptomator]] - Open source, encrypted cloud storage vaults. Integrates with
	279	most cloud providers and works locally.
	280	- [[https://apps.apple.com/us/app/instant-pgp/id1497433694][Instant PGP]] - PGP key generation, import/export, and encrypted message/file
	281	creation. Handy for old-school secure comms.
	282
	283	If you're serious about privacy, encrypted storage and messaging layers like
	284	these are essential.
	285
	286	#+begin_quote
	287	I use: Cryptomator when syncing sensitive data over Syncthing. I no longer
	288	require Instant PGP since Migadu's webmail client (SnappyMail) supports PGP.
	289	#+end_quote
	290
	291	* News & Social
	292
	293	Mainstream news and social apps leak all kinds of usage metadata, even when
	294	you're just lurking. These tools let you follow content with less exposure.
	295
	296	- [[https://netnewswire.com/][NetNewsWire]] - Free, open source RSS reader for iOS. Follow sites without
	297	tracking.
	298	- [[https://www.talklittle.com/three-cheers/][ThreeCheers]] - Privacy-friendly Reddit client for iOS. No official API calls,
	299	built-in filtering.
	300	- [[https://getvoyager.app/][Voyager]] - Clean, independent Mastodon client.
	301	- [[https://joinmastodon.org/][Mastodon]] - Federated, open source alternative to Twitter.
	302	- [[https://joinpeertube.org/][PeerTube]] - Decentralized video platform, accessible via web or PWA.
	303	- [[https://pixelfed.org/][Pixelfed]] - Federated, open source alternative to Instagram.
	304
	305	If you're going to be online, at least let it be on your terms.
	306
	307	#+begin_quote
	308	I use: NetNewsWire (via FreshRSS) for RSS feeds, and Voyager for Lemmy. I have
	309	used all of these apps and they are great, but I am not very active on social
	310	sites.
	311	#+end_quote
	312
	313	* Final Thoughts
	314
	315	This isn't about paranoia — it's about awareness. Every app you use, every
	316	service you sign into, quietly collects and trades your data. iOS makes true
	317	anonymity harder than other platforms, but these tools and services give you a
	318	fighting chance to keep your personal life personal.
	319
	320	If you have other privacy-friendly iOS tools you enjoy, [[mailto:hello@cleberg.net][email me]] — I'm always
	321	looking for new things to test.

 <section>
 	<h2>Recent Blog Posts</h2>
+	<div class="post">
+		<time datetime="2025-06-02 15:26:05">2025-06-02</time>
+		<a href="/blog/private-ios-apps.html">Privacy-Friendly iOS Apps for the Paranoid Minimalist</a>
+	</div>
 	<div class="post">
 		<time datetime="2025-05-30 10:53:28">2025-05-30</time>
 		<a href="/blog/it-audit-career.html">Future-Proof Your Audit Career: Emerging Technologies</a>
 		Macbook Pro 16"</a>
 	</div>
-	<div class="post">
-		<time datetime="2025-04-05 23:04:54">2025-04-05</time>
-		<a href="/blog/git-mirror.html">Mirroring my Repositories from GitHub to
-		GitLab</a>
-	</div>
 	<br />
 	<a href="/blog/">All Posts →</a>
 </section>

Commit f7d59771d8

Commit `f7d59771d8`