Steps Toward Protecting your Online Data/Privacy

Your 'Digitial Footprint'

Before you begin the journey of safeguarding your online data, there are a few crucial 'deal-breaker' aspects to consider. If you're not ready to make these sacrifices, it might be best to abandon any efforts towards data privacy:

• Avoid using a standard mobile device (such as a stock iPhone or Android phone).

  • This implies utilizing a secured device. On Android, this can be achieved across various devices (though it's most effective on Pixel Phones), while on iOS, it's not feasible.

    • Recognize that out-of-the-box devices are fundamentally designed to collect your data.

• Discontinue the use of Social Media and/or 'free tools' (such as Google apps, Apple apps, Samsung apps, etc.).

  • Social Media, particularly social media apps, not only gather the data you provide by using their services but also extract data from other apps and services on your device.

  • Many of these excellent free services remain free because they collect your data. For instance, Google examines all your emails/texts and photos, tracks your locations on maps, and analyzes every word you type into a Google document.

    • Look into 'de-googling' for more

• Give up using apps whenever you can.

  • Most app functionalities can be performed in a web browser, as apps primarily serve as data collection tools rather than for your convenience.

• Safeguarding your data and reducing your 'online footprint' requires a focused effort. Simply adopting a few 'basic' protections with a lackluster approach might actually be detrimental. This is particularly the case when adhering to many of the generic 'privacy tips' available online. Most of these tips are published by the same entities that aim to steal your data, and giving you a false sense of security is precisely their intention.

  • 
    

  • Ultimately, the most effective method to safeguard your online privacy is by embracing digital minimalism... 

The easiest way to reduce your online data is to avoid sharing it.

In short: If you're unwilling to change your online habits, your efforts to protect your online privacy will be futile.

If you're still keen on moving forward, here are some basic steps you can take to greatly minimize the amount of your online data being stolen* from you.

*Note - 'stolen' is used intentionally here because, even if you give implicit consent to share your data, you're not giving unlimited permission for them to take whatever they want and use it however they like.

Why is this so hard?

The answer to all your questions is 'money'!

The companies that collect our data are earning billions of dollars by doing so. These are the same companies that provide us with online services, devices, and tools. Their strategy from the beginning was always to offer content, tools, and services to gather our personal data. They have spent decades developing technology specifically to capture our data and to turn us into the pavolovian users of technology we have all become. You have to acknowledge their success.

Generally, no matter what protections we put in place, they will never be sufficient to stop the advanced data capture methods these companies have developed.

Embracing digital minimalism is the most effective way to manage your digital footprint.

Relying solely on tools and processes to safeguard your digital privacy without adopting digital minimalism has several drawbacks:

• It's a zero-sum game. Companies (and governments) have vast resources dedicated to collecting our information, keeping us perpetually one step behind.

• The technical effort involves a high 'hassle factor.' Eventually, it becomes unsustainable due to the ongoing effort required. Even for someone highly technical like myself, it becomes too cumbersome for minimal gain.

Steps to take for managing your privacy

• Your relationship with your smart device is unhealthy. Similar to personal relationships, you often don't realize how detrimental it is until you break it off.

  • Sever ties digitally (as much as you can) and free yourself from a harmful connection

• Minimize your smart device usage as much as possible, and then reduce it even further

• A very specific (and all goodness) step is to install the security and privacy based operating system on a Google Pixel Phone. This is called GrapheneOS and is basically a 'hardened' current Android OS

• Simplify your smartphone

  • Shut off all but the most necessary notifications, alerts

  • Remove all but the most important apps (where you can't use a web browser)

    • note: your mobile browser works just like a PC browser. You can even add a 'bookmark' to your mobile device home page so it looks and feels just like an app, but are running in your mobile browser.

• Consider a 'dumb phone' (only for calls and texting), though the compromises required are quite difficult.

  • I used a dumb phone for 2 years (Light Phone), and while the phone itself was fine, its limitations were too significant to ignore.

• Cease using social media.

  • If you are on social media, don't attempt to go private - it's not feasible.

• Opt for a computer whenever possible instead of your smart device.

  • Browsers on your PC can be made much more private. You'll also find that the larger screen and keyboard allow you to accomplish more in less time, thereby reducing your online presence.

• Engage in ‘Digital Abstinence’

• Limit the amount and type of your online searches.

  • You don't really need immediate knowledge fulfillment. You'll live better without it.

  • It's okay to admit you don't know something, rather than interrupt what you're doing to 'look it up' to appear smart.

  • And no, getting answers from Google, Siri, or Alexa instantly doesn't make you seem smarter...

• Switch your music streaming service for a device that plays uploaded music.

  • There truly isn't any app worse for data mining than Spotify!

  • It's perfectly fine to buy a CD or a digital MP3, and you'll support your favorite artists much more than by streaming their music!

• Disable location services and stop using maps like Google or Apple.

  • Every step you take is being recorded and tracked.

  • Providers know where you work, where you live, how you commute, the duration of your commute, when you're home, when you're not, where you've been, where you're going…

  • Did you know that Google provides directions that ensure you pass by their sponsors, and only companies that pay Google appear on their maps?

• Get news the traditional way – buy a newspaper. What you choose to read is completely private. You'll also encounter a variety of news, not just content tailored to your profile.

  • Enjoy reading your newspaper with a freshly brewed cup of coffee/tea.

    • Brew your own coffee/tea, so you won't have to leave your house, deal with crowds, and you'll save money (enough to pay for your newspaper!)

• Even better, reduce your news consumption...

Cutting down on news consumption might be the most effective way to reduce anxiety and stress while limiting how much 'they' know about you. Even better, you'll expand your perspective!

Technical steps you can and should take

Note: use this guide to help determine the effort for any particular step: (I've put the biggest bang for the buck steps at the top of the list)

• Effort:

  • "E"-asy

  • "H"-arder

  • "C"-omplicated

• Cost:

  • $0 - free

  • $$ - inexpensive

  • $$$ - more expensive

1. H | $$ - Replace your DNS service with NextDNS (highly recommended) or similar provider

   1. Here is a great article on DNS to manage your privacy Control Security with DNS

   2. All internet activities requires the use of DNS (the phone book of the internet) for finding sites. Without DNS you can’t use the internet

   3. Your ISP/Carrier uses their own DNS resolver - allowing them to track every single thing you do online - and sell it.E | $0 - Use the TOR browser and network. The ONLY way to be anonymous is by using TOR. VPN services won't make you anonymous

2. E | $0 - Use a privacy based browser

   1. I use LibreWolf on my Linux PC and IceRaven on my mobile devices. But there are many decent privacy based browsers out there.

   2. Never use a browser made by Microsoft, Apple, Google

   3. Don’t use a chrome-based browser as anything chrome uses Google's 'engine' and shouldn’t be trusted

   4. ‘harden’ your browser just to the point it protects you without too much hassle. (HERE is a great guide on browser security, or check out this video: Techlore-Hardening Firefox

3. E | $0 - Use a private search engine:

   • Never use default search engines such as Google, Bing, Yahoo, etc...

   • DuckDuckGo or Bravesearch is decent

   • These engines are more private and provide anonymity, but results aren't as strong, or rather you need to be better at what you are searching...

     • SEARX, MetaGer, Mojeek...

4. E | $0 - Use fake names and fake account information wherever you can - ESPECIALLY when doing searching, asking questions and performing research. Only give valid personal information when absolutely necessary to perform a transaction.

   1. you aren't obligated to tell anyone your real identity or contact information.

      1. your anonymous emails (see protonmail-addy.io become invaluable for this purpose

5. E | $0 - Don’t use your browser or a service provider’s password manager. I use BitWarden, its very secure and convenient.

   1. its best to let a password manager generate random passwords and store them for you

   2. If you do use your own password it is best to string meaningless words together rather than mixing numbers and characters (though many sites require numbers and case)

6. E | $0 - Replace standard sites such as YouTube with privacy based alternatives such as FreeTube. This will allow you to search the internet privately. Use the browser extension privacy-redirect. It will route links to private sites. It will redirect other social media sites to anonymous sites for: reddit | instagram | maps | twitter, etc...

7. E | $$ - Use a private email service. I use and recommend ProtonMail

   1. H | $$ - create your own domain for email – that way it is very easy to change your email service without changing your email address!

      1. Protonmail has many built-in security features that are there to reduce tracking and increase privacy

      2. ... just don't use google, etal.

8. E | $$ - Use an anonymous email service. Highly recommend Addy.io

   1. By using emails that are anonymous (not associated to you or a service), you can’t be tracked.

   2. By creating a unique email for every situation – you can easily shut it off and track who is selling your email information. Even for accounts I do transactions with – I have a separate anonymous email for their marketing lists and promotions; account@mydomain.com (for purchases and such), account-promos@mydomain.com (for marketing and promotions)

   3. Using Addy.io with protonmail (along with your own domain) is a win-win combination that provides an infinite amount of private aliases and easy management

      1. My personal domain for my primary email is: klonnect.com (a variation of 'connect'

      2. My anonymous domain is @klonnected.com (similar but 100% separate)

9. E | $0 - Use a private messenger service instead of SMS texting

   1. Signal is right now the ‘goto’. It works just like texting - but everything is encrypted between signal users. Plus - you can video chat and call all from the same app.

   2. From a convenience and privacy standpoint I use BEEPER for all my messaging needs. Beeper provides the ability to use multiple messaging platforms in one app (i.e. Signal, WhatsApp, Twitter, textint, etc...) (no apple text)

10. H | $?$ If you do NOT have a google Pixel phone, get one and install GrapheneOS on it.

    1. This may be the single best thing you can do to protect yourself online (if you use a smartphone)

11. E | $$ - Do NOT purchase and/or use a VPN:

    1. VPNs do nothing to protect your privacy, IF you want a level of privacy then TOR browser is the only way...

    2. Do use a VPN if you are using a public wifi: e.g.: starbucks, airport, etc…), but then, you shouldn't ever...

    3. Do use a VPN if you need it to gain access to a remote network (your home system, your company's network, etc...)

12. C - $0 - If possible, use Linux to run your PC (it has gotten pretty easy and will extend the life expectancy of your computer by years)

    1. Its more private and easier to configure

    2. It won’t force software and apps and updates down your throat and won’t keep forcing you towards their EDGE browser

13. H | $$$ - Purchase your own Router from a company that specializes in networking hardware (e.g.: Netgear, Ubiquiti, TP-Link, Asus...). Having your own router will allow you to manage the previously mentioned DNS. Many ISPs don’t want you to change your DNS so they don’t let you modify those settings on their router.

    1. don’t trust any router provided by your ISP or by a company that mines your data: (Amazon - (eero), Google(nest, etal), Apple...)