I'd say a normal phone is a lot worse than smartphones in general, unless you don't care about all your communications being readable by the carrier. With a smartphone you can make actually encrypted calls and texts over trustworthy applications/protocols (Signal, Matrix, Simplex, etc.), on a phone you're stuck with the carrier service; another thing that comes to mind is the storage, as far as I know there are no normal phones with an encrypted filesystem while it is default for a long while on Android.

On the other hand, if your new smartphone model isn't loaded with a privacy respecting ROM you'll also have at least some data sent to other third parties like Google and whatnot, but if you can change the ROM, then the potential for better privacy far outweighs the benefits of normal phones doing fewer things with your data by default. If you're going to use your new smartphone like an old phone, to make carrier calls and SMS, then there will be near to no improvements (except storage security maybe) and as you say, more data snooping

Your fears about the smartphone are not unfounded. If you take a regular smartphone with you as you go about your day, it will collect a ridiculous amount of data against you. Even without Internet it will cache the data and transmit it once it has signal. Only way to stop it is to install a custom ROM.

Keep in mind that even a dumb phone can track you. If it's connected to the cell tower then the telecom companies know your location and may share that with others. Also, calls and texts are not encrypted on a dumb phone and are probably being intercepted.

See if you can trade in your new cell phone for a Google Pixel and install GrapheneOS. That is currently the best privacy ROM. You can use this like a dumb phone and it will track you no more than a dumb phone could. To prevent tracking from cell towers, you can put it in airplane mode and use messaging apps over WiFi.

How about this perspective? You are being tracked regardless. Do you have friends? Do they have your number? You have a tracking ID. Have you ever used the Internet at home not on a VPN and not on a fingerprint-preventing browser (i.e. JavaScript off)? You have a tracking ID.

This tracking ID is surrounded by data it gathers from your interactions with others, regardless of whether you want it to or not. Your lack of presence here is far more telling than actually existing. Unless you literally live off the grid no contact, there's no getting away from it.

On the bright side, guess what? These tracking IDs are practically solely for advertising metrics. The chances of any of this data being meaningful beyond "vestmoria likes vintage cheeses after" is pretty much nil. I would even go so far as to say by having a presence in this space you are likely to be less targeted by prying eyes that actually matter, as opposed to right now where you are a clearly visible dark spot in a sea of lit beacons.

To put it another way - privacy now is through obfuscation, not lack of existence. Google solved the dumb-phone problem in 2013 and they have had advertising IDs on these from the moment they get used. They have had your data already for a long, long time now. Your advertising ID is better used clicking on every ad you come across using AdNauseam than it is trying to de-google a smartphone or avoid carrier data. Make the data on you inaccurate and worthless.

If you really want to avoid using tracking aspects of a smartphone, your best bet is convincing your people to download signal or matrix and use them exclusively, with notifications turned off on the phone. You'll want to run a VPN you trust. Others suggested custom ROMs to get away from Google, though I'm personally no fan of MicroG either.

I think it's worth considering accepting that unless you are very specific in how you use it, there is no real feasible way to not be tracked. Even if you take all precautions, even then, you are still being tracked by other peoples phones. With that in mind, your mental health should be put at ease knowing that rather than trying to avoid it, there are ways of feeding it dirty data to make you look like everyone else.

Using Linux you probably already are aware of quite a bit of this, but I've always felt that being off the grid or off the radar of adver-govs is a false hope and while there may be measures against it there's nothing that actually prevents it in full and it's so much more effort than allowing it to happen but lying about yourself. So what if they have data on you if it's irrelevant! On top of that, what does it matter if your calls have data on them (date/length). The content of the calls is a different story of course, I don't have a solution for that.

Maybe you can fake phone calls by spoofing phone models and locations and having their conversations spoken via AI.

https://eylenburg.github.io/android_comparison.htm

Your concern is well reasoned. A smartphone is a much larger risk surface compared to an application specific dumb phone. Running an entire operating system, increases the number of exploitive holes you could be running it anytime. You're almost guaranteed to be running at-risk software.

You can mitigate that risk, by using graphene as people have discussed. But if you truly don't care, get another dumb phone. It's hard to exploit the remotely, it's hard to install software remotely, Pegasus doesn't try target them. It's a smaller risk surface.

That being said, if you want some of the benefits of a smartphone. You can do so limiting your risk surface. Run stock Android, or graphene,. Make sure you're okay with the permissions you provide. And most importantly keep your software up to date. That's a reasonable level of paranoia versus utility trade-off

If you're really only making phone calls, the built in location tracking is probably the biggest issue? AFAIK, you can only use an off the shelf iPhone with an Apple account, and a similar Android phone with a Google account, so your location will be tied to and referenced with those.

Apple have branded themselves as guardians of their users' data, so many consider that a safe assurance. YMMV but it may be slightly better than Google's Dodgier approach. When in doubt, go to settings and turn everything off you don't use, location services foremost.

You may want to disable other apps that come with your phone as well. Basically anything you don't use. I don't know how much data can be harvested from background services of an app that doesn't have a user signed in, but at this point I'd err on the side of caution. Plus, as you say, your position can always be approximated by your mobile carrier through the cell towers you're connected to, but that goes for dumb phones as well.

Personally, I only use Android smartphones with custom ROMs like LineageOS without installing the Google apps or services framework because I Just Don't Use Google. Instead I install microG to spoof the GSF to apps that require it. That's a privacy compromise I can live with because I use my phone as an internet device as well. Needless to say I take privacy precautions on an app level as well.

Dumbphones do all that too.

get a cuatom rom that is privacy focussed,your concerns are valid, mostly. Though dumb phones aren't much better

I think its a bit of a overreaction, but you can always download Foss apps even if you can't download better private OSs, its not the best but its better then nothing

My 2 cents: I have a similar relation with smartphones as yours.

In my case, what I fear the most is some app getting my contact list and using it to send some kind of "XXX has joined YYY service" notification to all of them. Also, I didn't like that Google had all the data they wanted, so I ended with 2 smartphones:

• One de-googled (LineageOS without Google Apps) that I use for calls and trusted apps. This one has my contacts list.
• One default Android-Google without simcard for those apps that require oficial-Android (mainly banks apps) and any app I'm afraid could mess with the contact list.

AFAIK I've only had one incident because I trusted Telegram too much. There is always non-zero risk, but this works for me.

I find they're a pain to use and I only have one out of social pressure, and privacy or not I'm constantly confused on why they're so popular.

I just use a throwaway account and have the rule of not putting in any data that I don't want to be read - which is barely anything any way because I do all my computing on my Linux laptop. I figure if they're collecting location data and recording me then they're just associating it with "random guy x" because I've never given it anything else. I should look in to one of the de-Googled Android distributions but I have so little interest and energy in anything to do with it, if it could be made totally private I would still rarely use it.

Well I've had a smartphone since 2012, just to try it. Honestly I don't feel it has added quality to my life. Having specialized devices such as a camera, GPS, mp3 player and so on is actually more convenient and not more expensive. For example a GPS has a longer and more reliable battery life.

If you never enable any data services on your SIM (GSM only for calls) and never connect to WiFi. You're not leaking anymore data than an old fashioned phone.

However, the fact that you are asking these questions does suggest you are probably being unhealthily paranoid. (Reading these replies, it seems you are in good company on this forum.)

I'm going to assume you are not engaging in high level cyber activities that would require you to adopt this level or paranoia. If you were, you wouldn't be asking basic questions.

Instead, it sounds like you have developed an irrational fear of what tech companies can realistically do with your data and what level of harm they may wish to cause you.

Typically, they can log your search and browser data to determine if, for example, you like pizza. Then they may show you an advert for pizza or highlight the nearest Dominos on Google maps. But... they can only do that if you share that information with them in the first place by using your new smart phone (with none of the privacy settings enabled) to search for pizza and then using Google maps. Nobody is forcing you to do that. But is it really that bad even if you do?

Google are not going to clone you, or assassinate you or somehow work out you are not paying taxes or are engaging in illegal activity unless you use your phone to do it. And even then, they don't go round grassing people up to the government for the fun of it. They just want you to click on adverts and, once you are aware of how they operate, it's relatively easy to avoid them whilst still getting great value from a pretty incredible piece of modern technology.

Now, if you are genuinely worried about government targeting (I don't know what country you live in) an encrypted messaging App will be significantly more secure than an unencrypted old GSM phone that is quite easy to intercept and relies on the integrity of your MNO provider.

My advice, stop worrying. You already have a cautious mindset so you won't get tricked by these companies, but you could also be enjoying many of the benefits of being able to access all of humanities collective information from your pocket.

Over reacting, if you're going to use computers and the internet, it's literally the exact same thing. How much data you leak is 100% up to your practices, and of course phone choice. If you get a Pixel and run Graphene on it, you're base is great. Beyond that, app choices become the next threat. Don't use privacy invading apps you can't trust, don't give up data on the phone that you wouldn't on a computer, then you can protect privacy as much as you can, while still being realistic and living normally.

The biggest hurdle is simply being aware of the threats you're up against and how to mitigate them. 100% privacy isn't a realistic goal. Minimizing the leaks and making it very difficult to connect the dots is a far more realistic plan.

Yes you are batshit crazy