Big Tech Alternatives That Respect Privacy

Big tech alternatives that respect privacy already exist for nearly everything you do online: Signal instead of WhatsApp, Proton Mail or Tuta instead of Gmail, Firefox instead of Chrome, Immich instead of Google Photos, Mastodon instead of X, and OpenStreetMap apps instead of Google Maps. None of these is a secret. The reason most people have not switched is not that the software is missing. It is that switching costs something, and almost nobody tells you honestly what.

This page names the actual replacements, category by category, and says what each one gives up. Some are drop-in and you will barely notice. Some will annoy your family. A few ask you to run a server, which is a real hobby and not a weekend. We build and operate this kind of software at the WOPR Foundation, so the tradeoffs listed here are ones we have run into ourselves.

What It Actually Means To Respect Privacy

Privacy is a marketing word now, so it helps to have a test instead of a feeling. Four questions do most of the work.

• Who pays? If a service is free and there is no subscription, no donation drive and no grant behind it, the money comes from somewhere. Advertising is the usual answer, and advertising runs on knowing things about you.
• Can the provider read your content? End-to-end encryption means the keys live on your devices and the server only holds scrambled data. Encryption at rest means the server holds your data and also holds the key that opens it. Both get described as encrypted.
• Can you leave with everything? A real export gives you your files in formats other software can open. A zip of proprietary blobs is technically an export and practically a hostage situation.
• Can anyone check the claims? Open source is not automatically private, but closed source means the privacy policy is the only evidence you will ever get.

Run those four questions against everything below, including the tools we recommend. Something that passes three of four is still a large improvement over something that passes none.

Search And Browsing: The Easiest Switch

This is the change with the lowest cost and the fastest payoff, so start here. It takes an evening and there is nothing to migrate.

For search, DuckDuckGo and Startpage return results without building a profile attached to you. Brave Search runs its own index rather than reselling somebody else's. Kagi is a paid subscription with no ads at all, which is the cleanest possible answer to the who-pays question. If you already run a server, SearXNG queries other engines on your behalf and merges the results.

For browsing, Firefox is the practical default: it is not built by an advertising company and it still runs every site. LibreWolf is Firefox with the telemetry stripped and the defaults already tightened. Mullvad Browser goes further and tries to make you look identical to everyone else, which is a different goal from simply blocking trackers. Whatever you pick, install uBlock Origin; a good content blocker removes more tracking than any single browser preference.

Expect a handful of sites to nag you, and expect weaker results on very local searches. That is the tradeoff.

Email: Harder Than It Looks

Email is where people get discouraged, because the honest answer is that email was never private and cannot be fully fixed by changing providers. Every message carries a sender, a recipient and a subject line in the clear, and the person you are writing to is quite likely on Gmail anyway.

What you can fix is who reads your own mailbox. Proton Mail, based in Switzerland, and Tuta, based in Germany, encrypt your stored mail so the provider cannot read it, and both are funded by subscriptions rather than ads. Fastmail does not do zero-access encryption, but it sells you a mailbox instead of selling your attention, which is still a different business model from free webmail.

Buy a domain name and use it for your address. That single step means the next move costs you nothing, because your identity stops belonging to whichever company hosts the mail.

Self-hosting mail with mailcow or Mailu is possible, and we do not recommend it as a first project. Spam filtering is genuinely hard, and large providers quietly discard mail from small unfamiliar servers, so you can lose messages without ever being told.

Messaging And Calls

Signal is the recommendation, and for ordinary personal use there is no close second. It is end-to-end encrypted by default, deliberately keeps very little about who talks to whom, is run by a nonprofit foundation rather than an advertiser, and the apps are polished enough that non-technical people will actually use them. The catches are that it wants a phone number, and that everybody you message has to install it too.

SimpleX Chat avoids user identifiers entirely, phone numbers included, at the cost of a rougher experience. Matrix, usually through the Element app, is the federated option: many independent servers making one network, and you can run one yourself. That makes it the right choice for a team, a club or an organisation that wants its own space with its own rules. XMPP is older, lighter and still fine.

For calls, Jitsi Meet needs no account and can be self-hosted on modest hardware. BigBlueButton is the heavier option, built for classes and long meetings with real moderation controls.

Files, Photos, Notes And Passwords

This is the category where running your own server starts to earn its keep, because the data is large, personal and permanent.

Nextcloud is the closest thing to a complete Google Workspace replacement: files, calendar, contacts, shared folders and documents you can edit in the browser through Collabora Online or OnlyOffice. It is genuinely capable, and it is genuinely a server you now maintain. If that is too much, Syncthing keeps folders in sync directly between your own devices with no server in the middle and no account anywhere.

For photos, Immich has become the serious Google Photos replacement, with face grouping, search and automatic phone backup, all running on hardware you own. PhotoPrism is the calmer, simpler alternative. For notes, Joplin and Obsidian both store your notes as ordinary files on disk, which matters more than any feature list. KeePassXC or Vaultwarden handles passwords.

If you want to stay on a mainstream cloud, Cryptomator encrypts a folder before it uploads, so the provider stores something it cannot read. That is a legitimate middle path and takes an afternoon. Holding the keys is the part that counts, which is the whole argument in what data sovereignty means.

Social Media Without An Owner

Mastodon stands in for X, Pixelfed for Instagram, PeerTube for hosting video, and Lemmy for Reddit-style forums. They all speak ActivityPub, so an account on one server can follow accounts on any of the others. Nobody owns the network the way a company owns a platform, and no ranking system is tuned to keep you scrolling, because there is no ad inventory to sell against your attention.

The honest downside is that your friends are not there yet. Servers are small, communities are patchy, and a strictly chronological timeline feels quiet if you are used to being fed. Some people find that restful and some find it dead.

Bluesky sits in between: one large network today, built on a protocol that permits other hosts, and it has the users the fediverse lacks. Running your own Mastodon server is very doable on a small machine and puts moderation policy in your hands, which is either the entire point or an unwanted job, depending on your appetite for it.

Your Phone And Your Desktop

Every app choice above sits on top of an operating system that is also making decisions about you, so at some point the platform itself is the question.

On mobile, GrapheneOS is the strongest option available, though it only supports Google Pixel hardware. It removes Google services by default and can run them sandboxed when an app insists. CalyxOS and LineageOS cover more devices with a gentler learning curve. F-Droid gives you a store of open-source apps, and Aurora Store fetches Play Store apps without a Google account attached.

On the desktop, a mainstream Linux such as Debian, Fedora or Linux Mint removes the telemetry question at the root, and current versions install about as easily as anything else. For media, Jellyfin plays your own library without an account or a recommendation engine.

Network-wide, Pi-hole or AdGuard Home blocks tracker domains for every device in the house, including the ones with no settings screen, like a television.

What These Alternatives Are Genuinely Worse At

Enthusiast posts tend to leave this part out, so here it is plainly.

• There is nobody to call. When your own server breaks, you are the support department, usually at a bad hour.
• Account recovery is on you. Zero-access encryption means the provider truly cannot restore your mailbox if you lose the password. That is the feature working correctly. Write the recovery codes down and keep them somewhere physical.
• Some things are simply less polished. Search across a decade of photos is where the large providers poured enormous engineering effort. Sharing an album with relatives gets awkward. A few banking and payment apps refuse to run on de-Googled Android.
• Network effects are real. You cannot unilaterally move a group chat, and telling people their app is bad almost never works. Move the people who are willing to move and let the rest sit.
• Self-hosting is a security responsibility. A server you set up and forgot to patch is worse than a competently run company. Automatic updates and offsite backups are the price of admission, not optional extras.

None of that argues for giving up. It argues for switching where the return is high, and being relaxed about the rest.

A Switching Order That Actually Works

Trying to change everything in one weekend is how people end up back on Chrome by Wednesday. Easiest and highest-return first:

1. Browser, search engine and a content blocker.
2. A password manager, because every later step depends on it.
3. Signal, for the people who will install it without a fight.
4. Email on a domain you own, at a provider you pay.
5. Photos and files, either encrypted into your existing cloud or moved onto a server you run.
6. The phone operating system, last, because it is the biggest disruption.

Our step-by-step de-Googling guide walks the same path in more detail, and the rest of the Learn section covers the infrastructure underneath it.

Past the app layer, the same logic scales up. A neighbourhood can own the network itself instead of renting connectivity from one provider, which is the subject of how mesh networks work; Blackout Labs builds off-grid LoRa mesh hardware for exactly that. Groups that need to make decisions together without handing the ballot to a platform can use Folkmoot, which is verifiable voting software. The pattern repeats at every scale: own the thing you depend on, or know precisely who does.

Frequently asked questions

What is the best alternative to Google Search for privacy?

DuckDuckGo and Startpage are the easiest drop-in replacements, because neither builds a search profile tied to you. Brave Search runs its own index rather than reselling results. Kagi charges a subscription instead of showing ads, which removes the incentive to track you at all. Results for very local queries are usually weaker than Google's, and that is the main thing you notice.

Is Signal really more private than WhatsApp?

Yes, in practice. Both encrypt message contents with the same underlying protocol, but WhatsApp is owned by an advertising company and collects far more metadata about who you contact, how often and from where. Signal is run by a nonprofit, deliberately stores almost nothing about your contacts, and its client and server code are open to inspection.

Do I have to self-host anything to get real privacy?

No. Most of the benefit comes from hosted services with a different business model: a paid mailbox, an ad-free search engine, an encrypted messenger. Self-hosting pays off when you want full control of files and photos, and it is an ongoing commitment to patching and backups. Encrypting a folder with Cryptomator before it reaches a mainstream cloud is a solid middle path.

Will switching to privacy alternatives slow me down or break things?

Some friction is real. Expect the occasional site that misbehaves with a content blocker, weaker photo search than Google offers, and a few banking apps that refuse to run on de-Googled Android. Day-to-day speed is usually unaffected, and Firefox, Signal and Proton Mail feel as quick as what they replace. Switch one category at a time.

Is Proton Mail private if the person I email uses Gmail?

Only partly. Your messages sit encrypted on Proton servers where Proton cannot read them, but once mail arrives at Gmail, Google can read it like any other message. Subject lines and addresses travel in the open regardless. Changing providers protects your own mailbox and your own history, which is worth doing, but it cannot make email private end to end.

Can I keep using an Android phone without Google?

Yes. GrapheneOS on a Pixel is the strongest option and can run Google services sandboxed when an app demands them. CalyxOS and LineageOS support more devices with less effort. F-Droid provides open-source apps and Aurora Store fetches Play Store apps without a Google account. Check that your essential apps work before wiping the phone.