Most Australians think of their phone as having maybe a dozen apps worth worrying about. The reality is more uncomfortable. Your keyboard is logging what you type and sending usage data to Google. Your gallery is uploading and scanning your photos to train AI systems. Your calendar is syncing every appointment to servers in California. Your file manager has access to your entire device. Your calculator probably has no business on the internet — but plenty of them phone home anyway.
Every app is a potential data collection point. And the default apps that come pre-installed on a standard Android phone are, almost without exception, built by companies whose entire business model depends on knowing more about you than you’d be comfortable with if you stopped to think about it.
This post is a complete, practical guide to the Android app alternatives Google won’t give you by default. The actual apps we install on every FreedomTech phone. What they replace, why they’re better, and where to get them.
For the full picture on how your phone tracks you at the OS level, read our post on phone tracking in Australia. This post focuses specifically on the apps.
And for the broader surveillance landscape, read our post on Big Tech companies in Australia — the data brokers, government data requests, and the commercial model that makes all of this rational behaviour from their perspective.
To understand why GrapheneOS is the right foundation for all of this, read our post on why Google-free phones are the future of digital life.
Most of the Android app alternatives in this guide are installed via F-Droid — the open-source app store that operates completely outside Google’s ecosystem. No Google account required. No advertising. No tracker counts inflated by Google’s own infrastructure.
That is changing. Google has announced that beginning in 2026, all apps on certified Android devices must pass Google’s verification system to be installable. F-Droid, as an open-source store that self-signs its apps, cannot comply with this framework. Apps like NewPipe, HeliBoard, Aegis, Fossify, and many others in this guide will become progressively harder — and eventually impossible — to install on a standard certified Android phone running Google’s software stack.
We have covered this in detail in our post on Google’s 2026 Android app restrictions. The short version: the window for installing privacy apps freely on a standard Android phone is closing. The open-source ecosystem you can access today will be significantly curtailed within the year.
On a FreedomTech deGoogled phone running GrapheneOS, none of this applies. GrapheneOS does not include Google Play Services or Google’s certification framework. F-Droid works without restriction. Every app in this guide installs and runs exactly as it does today, and will continue to do so after September 2026. If you’re serious about maintaining access to the privacy app ecosystem long-term, a FreedomTech deGoogled phone is not just a nice-to-have — it is the only platform where these apps will still be freely available in a year’s time.
Switching to GrapheneOS removes Google’s underlying surveillance infrastructure from your device. But the apps you install can introduce new tracking through a different door.
A 2025 study published in Cybernetics and Information Technologies analysed 4,980 Android apps and found that 67.7 per cent had inconsistencies between what they claimed to collect in Google Play’s Data Safety section and what they actually collected. Changing your phone’s operating system while keeping the same apps is like replacing the locks on your front door and leaving all the windows open.
The Android app alternatives in this guide are either fully open-source or independently audited with clear, verifiable privacy policies. None are advertising-supported. None sell your data.
Before we get to individual replacements, one project is worth understanding as a whole. Fossify delivers the Android app alternatives that Google leaves out — a suite of open-source, ad-free apps covering the basic system functions most people take for granted — gallery, calendar, contacts, file manager, calculator, clock, music player, phone dialler, and SMS. No permissions you haven’t granted. No background network access. No advertising. No data leaving your device.
Fossify emerged in 2024 as a fork of the well-regarded Simple Mobile Tools suite, after that project was sold to a company called ZipApps, which promptly introduced subscriptions and advertising. A developer who had worked on Simple Mobile Tools forked the codebase before the acquisition completed and continued building it under the Fossify name. It is the direct successor: free, open-source, and actively maintained.
We install Fossify apps across the board for system-level functions on every FreedomTech phone. Every app is available on F-Droid.
Ente Photos is the closest like-for-like replacement for Google Photos, with one fundamental difference: every photo and video is end-to-end encrypted on your device before it leaves. Ente cannot see your photos. Backups are stored in three geographic locations — including an underground facility — but the content is mathematically inaccessible without your private key. The code is fully open-source and has been audited by Cure53, one of Europe’s most respected cybersecurity firms, at the request of CERN, which uses Ente internally.
On-device AI handles face detection, object search, and memory curation locally — without sending images to the cloud. You get 10GB of free storage. Paid plans can be shared with up to five family members at no extra cost. Available on F-Droid, iOS, Windows, Mac, and Linux.
Google Photos, by contrast, scans and analyses every image you upload. That facial recognition data, location metadata, and content analysis feeds Google’s AI training and advertising profiles.
Fossify Gallery is the purely local option. No account, no cloud, no network access. Supports all major formats including RAW, JPEG XL, MKV, SVG, and GIF. Includes a basic photo editor and can strip EXIF metadata including GPS coordinates when sharing photos. If you don’t need cloud backup, Fossify Gallery is all you need. Available on F-Droid.
WhatsApp uses end-to-end encryption for message content — and that is where the privacy story ends. WhatsApp is owned by Meta, and its privacy policy confirms it collects and shares with Meta your phone number, profile picture, who you communicate with, how often, when you last used the app, your device information, and your IP address. The message content is private. Everything around it feeds Meta’s advertising machine.
Signal is run by the non-profit Signal Foundation, funded entirely by donations with no advertising revenue. Its code is fully open-source. It collects almost nothing — only your phone number, protected by its “Sealed Sender” technology, which conceals metadata so that even Signal’s own servers cannot determine who is communicating with whom.
Signal supports encrypted messages, voice calls, video calls, group chats, and disappearing messages. For the vast majority of what people use WhatsApp for, Signal does the same job with meaningfully stronger privacy. Available on F-Droid and directly from signal.org.
Gmail is free because Google reads it. Not in the way a person reads an email — algorithmically, at scale, to build advertising profiles. Every message you send or receive contributes to the picture Google holds about your health, finances, relationships, and interests.
ProtonMail was founded by scientists from CERN and is based in Switzerland, subject to some of the world’s strongest privacy laws. Every email is protected by zero-access encryption — Proton cannot read your messages. The encryption happens on your device before anything reaches Proton’s servers. There is nothing to hand over because the servers hold ciphertext that Proton has no keys to decrypt.
One honest caveat: end-to-end encryption only applies when both sender and recipient use ProtonMail. When you email someone on Gmail, the message is encrypted in transit but readable at their end. For truly sensitive communications, use Signal. Available on F-Droid and directly from proton.me.
Google Chrome is Google’s most comprehensive data collection tool. Every site you visit is reported to Google by default. Your browsing patterns, search queries, and time on each page all feed into the advertising infrastructure.
Brave is built on the same open-source Chromium foundation as Chrome — compatible with Chrome extensions and websites — but ships with tracker blocking, fingerprinting resistance, and third-party cookie blocking enabled by default. Cookies clear on exit. Ads are blocked. No connection to Google’s advertising network.
We pre-configure Brave on every FreedomTech phone and laptop: Shields on Aggressive, fingerprinting on Strict, Leo AI off, Rewards off, Sync off. The switch from Chrome requires no learning curve. Available on F-Droid and directly from brave.com.
Every Google search is logged, timestamped, and tied to your account or device. Over time it reveals your medical concerns, financial situation, and political views in extraordinary detail.
Brave Search is our primary recommendation. It runs on Brave’s own independent search index — not a re-skin of Google or Bing — with no tracking or profiling. It is the default search engine in Brave browser and the one we configure on every FreedomTech phone.
For users who want Google-quality results without Google seeing them, Startpage is the best alternative. It acts as a privacy proxy to Google’s index — your search reaches Google anonymised, with no IP address or identity attached. Based in the Netherlands under strong EU privacy law.
Qwant is a French search engine with its own partial index, no user tracking, and no filter bubble. It is independently operated under EU jurisdiction and a solid option for users who want to avoid both Google and Microsoft infrastructure entirely. Result quality for Australian searches can be inconsistent but it is improving.
Kagi is the premium option at approximately AU$7 per month. It runs a fully independent index with no advertising, no tracking, and no data selling whatsoever. Search quality is widely regarded as the best of any private option available. Worth it for users who search heavily and want the most accurate results without compromise.
Google Maps logs every destination you search, every route you drive, and every business you view. That movement data directly informs advertising targeting and is shared with Google’s advertising partners.
Magic Earth is built on OpenStreetMap data. Its stated privacy policy: “We do not track you. We do not profile you. We do not have your personal data.” Turn-by-turn. navigation for driving, cycling, hiking, and public transport. Android Auto support. Speed camera alerts. 233 countries covered.
Important update for 2025: Magic Earth moved to a freemium model. Core navigation remains free, but offline maps and traffic-aware routing now require a subscription at approximately AU$3 per month. If offline maps are essential — and for anyone travelling regional or rural Australia, they should be — factor that in.
Organic Maps is our recommendation for users who want zero subscription, zero tracking, and fully offline maps with no compromise. It is completely free and fully open-source, also built on OpenStreetMap. Offline maps for every country are included at no cost. No account. No advertising. No data collection of any kind.
The trade-off: Organic Maps has no live traffic data and no Android Auto integration. For everyday navigation including city driving, suburban routes, hiking, and cycling, it performs reliably. For users who need live traffic and Android Auto and are willing to pay a small subscription, Magic Earth is the better fit. Both are available on F-Droid.
Gboard is the default keyboard on most Android phones. It requires internet access — a permission that cannot be removed — and by default shares usage statistics and typing snippets with Google. An academic study from Trinity College Dublin documented that Gboard makes regular background connections to Google’s servers. Voice typing sends audio recordings to Google’s cloud. The “Share usage statistics” option, which transmits typing behaviour to Google, is enabled by default and most users never change it.
HeliBoard is an open-source keyboard based on AOSP and the OpenBoard project. It has zero internet permissions — it is physically incapable of connecting to the internet, which means nothing you type ever leaves your device. It supports multiple layouts, multilingual typing, clipboard history, customisable themes, and gesture-delete. Word suggestions work via locally stored dictionaries downloaded once during setup.
The honest trade-off: HeliBoard’s autocorrect and predictive text are not as seamless as Gboard’s cloud-backed suggestions. If you are a heavy swipe typist, expect a short adjustment period. For users who primarily tap to type, the switch is straightforward. Available on F-Droid.
Google Calendar syncs your appointments, locations, attendees, and recurring events to Google’s servers. Every medical appointment, meeting, and personal commitment is readable by Google and covered by its data practices.
Fossify Calendar stores everything locally on your device. No Google account required. Multiple views, customisable reminders, event repetition, and optional sync with Nextcloud or Exchange if you need cross-device access without Google.
If you want encrypted cloud sync, Proton Calendar applies the same zero-access encryption as ProtonMail to your schedule. Event titles, descriptions, locations, and attendees are all encrypted on your device before syncing. Included with any Proton account. Both available on F-Droid.
Google Contacts syncs your entire address book — names, numbers, emails, notes, relationships — to Google’s servers, where it feeds into the social graph Google holds about who knows whom.
Fossify Contacts keeps contacts on your device only. Supports groups, favourites, custom fields, and import/export via standard vCard format. No network access. No Google account. Available on F-Droid.
Google Password Manager stores your credentials on Google’s servers, tied to your Google account. There are three strong alternatives depending on your preference for offline control versus cloud convenience.
KeePassXC is a completely offline, open-source password manager. Your passwords live in an AES-256 encrypted database file that exists only on your device. Nobody else holds a copy. The French National Cybersecurity Agency (ANSSI) awarded KeePassXC a formal security certification in 2024 following an independent audit. On Android, KeePassDX reads KeePass database files with biometric unlock. Best for users who want maximum control and are comfortable managing the database file themselves. Available on F-Droid.
Proton Pass applies the same zero-access encryption model as ProtonMail to your passwords. Your vault is encrypted on your device before it syncs to Proton’s servers. Proton cannot read your credentials. Includes autofill, password generation, email aliasing, and two-factor authentication storage. Available as part of a Proton account. Best for users who want cloud sync with strong encryption and are already using ProtonMail. Available on F-Droid.
Bitwarden is a fully open-source cloud password manager with a generous free tier. Your vault is encrypted before leaving your device using AES-256. Bitwarden’s code is publicly audited and available for anyone to inspect. For users who want the convenience of cloud sync across multiple devices without using Google, and prefer an established cross-platform tool, Bitwarden is a widely trusted option. Available on F-Droid.
Google Authenticator is closed-source and previously synced 2FA codes to Google’s cloud without explicit user consent.
Aegis Authenticator is the open-source replacement. Your codes live in an encrypted vault protected by your own password, with optional biometric unlock. No cloud sync. No account. Compatible with every service that offers 2FA. Can import from Google Authenticator, Authy, and Microsoft Authenticator. Available on F-Droid.
Google Files has background network access and reports usage data to Google. Your file manager has access to everything on your device — it should not be phoning home.
Material Files is a polished, open-source file manager following Material Design guidelines. Supports FTP, SFTP, SMB, and WebDAV network access, archive management, and root access. Clean interface. For users who want simple local navigation without network features, Fossify File Manager is lighter and equally ad-free. Both on F-Droid.
The default Android camera app embeds EXIF metadata into every photo — GPS coordinates, device identifiers, timestamp, lens information. That data travels with every image you share.
Open Camera is a fully open-source camera app available on any Android phone. It gives you direct control over EXIF metadata — you can strip GPS data and device information before sharing. It supports manual controls including ISO, shutter speed, white balance, and focus, as well as RAW capture, video recording, and HDR. No account required. No background network access. No data collection. Available on F-Droid.
Note for FreedomTech phone owners: every phone we build runs GrapheneOS, which includes Secure Camera from the GrapheneOS project. Secure Camera strips all EXIF metadata by default, requires no storage permissions, and is the cleanest privacy-focused camera available. Open Camera is the recommendation for standard Android phones where GrapheneOS is not installed.
VLC has surpassed 6 billion downloads and has been the trusted open-source media player for over two decades. On Android it plays virtually every video and audio format without additional codecs, with no ads, no account, no tracking, and no data collection. Maintained by the non-profit VideoLAN organisation. Available on F-Droid.
YouTube Music requires a Google account and tracks every song you play to build your advertising profile. Fossify Music Player is a clean, open-source player for local music files. No network access, no account, no tracking. Supports standard audio formats with a home screen widget. VLC handles music equally well if you prefer a single app for both audio and video. Both on F-Droid
The YouTube app logs every video you watch and every search you make, tied to your Google account and device. Even without an account, Google links your viewing behaviour to your device and IP address.
NewPipe is an open-source YouTube client built from scratch without any of Google’s own libraries or APIs. No Google account required. No ads. No algorithm. No tracking. You can subscribe to channels, download videos for offline viewing, play audio in the background, and use picture-in-picture — all without paying for YouTube Premium and without Google knowing what you watch.
NewPipe is only available on F-Droid and from newpipe.net — not on the Play Store.
Google Keep syncs your notes to Google’s servers. Notes often contain some of your most candid thinking — health reminders, financial details, temporary passwords, private thoughts.
Standard Notes is end-to-end encrypted and open-source, with a free tier and cross-device sync. Your notes are encrypted before they leave your device. Notesnook is a strong open-source alternative with a free tier and E2E encryption. Both on F-Droid.
Google Drive stores your files on servers Google can read, analyse, and use to train AI systems. Proton Drive applies zero-access encryption — files are encrypted on your device before upload. Proton cannot read them. 1GB free with upgrades available. For full data sovereignty, Nextcloud lets you self-host your own encrypted cloud storage. Both on F-Droid.
Every app in this guide is worth installing on a standard Android phone right now. But two realities are worth being clear about.
The first is structural. On a standard Android device, Google Play Services — the background infrastructure that underlies the operating system — collects device data and advertising identifiers regardless of which apps you use. The apps in this guide address what your apps collect. They do not address what Google’s own infrastructure collects underneath them.
The second is time. Beginning in 2026, Google is rolling out changes that will progressively restrict which apps can be installed on certified Android devices. F-Droid — the source for most of the apps in this guide — cannot comply with Google’s new verification requirements. Apps like NewPipe, HeliBoard, Aegis, and the Fossify suite will become increasingly difficult to install on a standard Android phone. Read our post on Google’s Android restrictions for what’s coming and when.
On a FreedomTech deGoogled phone running GrapheneOS, both of these problems disappear. Google Play Services is absent. The 2026 verification policy doesn’t apply — it is enforced through Play Services, which GrapheneOS doesn’t include. F-Droid works without restriction now and will continue to do so. Every app in this guide installs freely, and always will.
No. Start with Signal, Brave, and ProtonMail — the highest-impact switches. Each is independent. Add the others at your own pace. Fossify apps are a good second wave because they install quickly with no configuration needed.
Some will, some won’t. Apps available through the Google Play Store — Brave, ProtonMail, Signal, Bitwarden, Proton Pass — will continue to work on standard Android because they comply with Google’s requirements. Apps distributed only through F-Droid — NewPipe, HeliBoard, Aegis, Fossify, Organic Maps — will face increasing restrictions on standard certified Android devices beginning in 2026. On a FreedomTech deGoogled phone, all of them work without restriction permanently.
Simple Mobile Tools was a well-regarded suite of open-source system apps. In 2023 its developer sold the project to ZipApps, which introduced advertising and subscriptions. Fossify is the community fork that preserved the original code and has continued developing it. If you still have Simple Mobile Tools installed, replace them with the Fossify equivalents.
Yes. NewPipe is a separate client built from scratch that accesses publicly available YouTube content. It does not modify YouTube’s app, circumvent DRM, or download paid content. It has been in active development since 2015. Using it to watch freely available content is legal.
It depends on your priorities. KeePassXC with KeePassDX gives you the most control — your vault never leaves your device. Proton Pass is the best option if you want encrypted cloud sync and are already using ProtonMail. Bitwarden is the widely trusted cross-platform option if you want an established open-source cloud manager. All three are meaningfully better than Google Password Manager.
Every app in this guide is one of the Android app alternatives Google won’t install for you — a practical replacement for something actively working against your privacy. Making these switches on your current phone is meaningful. But there is a deadline on how long that remains straightforward — and on a GrapheneOS phone, there is no deadline at all.
At Freedom Technology and Services, every phone we build comes with Signal, ProtonMail, Brave, Aegis, Magic Earth, Organic Maps, KeePassDX, NewPipe, Open Camera, Fossify Gallery, Fossify Calendar, VLC, and HeliBoard already installed and configured. GrapheneOS is set up. Your phone ships with the FreedomTech manual — everything you need to get started is in there.
Browse our deGoogled phones and tablets.
For enquiries: [email protected]. For quick questions, join us on our Telegram chat channel.
