After all the recent NSA revelations, it's been even more important to use Free Software on our mobile phones. Let me express this in another way: We should be very careful about what software we use on a device that is always on and in our pocket 24h a day.

Starting from the very basic thing that makes our smartphone operate, it seems that we don't have many options. So if you are using Iphone or Windows Phone, let me remind you that both of these companies are in the infamous NSA slides for giving access to users private data.

So this post is about Android and my current setup of running only Free Software on my smartphone. I know what you are thinking.. that Google is also part of NSA's "special friends". Android is self-defined as an "Open Source Platform" (AOSP), and pretty much it is since it's released under a mix of Apache and GPL license (although mostly developed behind closed doors). But this isn't what you get when you buy a smartphone. Your device will certainly have preinstalled all of the Google's proprietary stuff (gmail, play, etc) and probably manufacturer and/or vendor applications. Things that you have no idea what they do, besides their "normal" functionality, because we don't have the code to look at.

Operating System

If you happen to be on Replicant's short list of supported devices then this is the way to go. But since this applies to very few people CyanogenMod is the next best thing.

That's the part that is most difficult, since you have to flash your phone with the right CyanogenMod's ROM. The instructions on the wiki are very detailed, but I know that this should look like a difficult process to non-geeks. At FSFE we run a campaign on how to free you Android, so if you ever happen to find out about a "Free your Android" workshop near you location go and people will love to help you.

Still, if flashing your phone seems too complex skip to the next section, but at least stop using the pre-installed proprietary apps and remove any Google account you may have entered during initial phone setup (a factory reset may help).

CyanogenMod is not perfect. It contains scripts that extract proprietary code necessary for some phone components (eg. camera) to work. The good thing is that these parts are firmware, thus non-executable code. You may also need to tweak it a bit:

  • Remove Google analytics from CyanogenMod by flashing freecygn.
  • Stop CyanogenMod from reporting tethering usage to your provider, by changing the "tether dun required" setting.
  • Change DNS settings so that CyanogenMod stops using Google's DNS servers, that has a permanent log policy.
  • Choose to fully encrypt your device with a pin (Settings -> Security -> Encrypt phone).

Apps

Since we got rid Google apps, one way or another, we need a way to install software to our phone. Free Software. F-droid comes to the rescue, an app for accessing software repositories for android and that comes preconfigured with its own repository containing only Free Software apps. Install it and then head over to Guardian project to add its repository to F-droid. I won't provide links for the apps below, since you can easily install them through F-droid.

Contacts / Calendar

DavDroid is an app for synchronizing Contacts and Calendar. It supports both CalDAV and CardDAV, so you will be able to set it with your provider or self hosted service.



Email

K9 is the ultimate email client for Android. It has all the features you would expect from a mail client. You can combine it with AGP or OpenKeychain for PGP (I prefer the second, since AGP doesn't support subkeys yet).



Browser

Well... Firefox. You can add some of the usual privacy Add-ons. Orweb is a browser preconfigured for anonymous access to the web through the Tor network.



Files / Photos

I have an Owncloud instance and although I use it mostly for Contacts/Calendar (I prefer Sparkleshare for files) I find it really handy that my photos can be synced automatically with OwnCloud and accessed directly from my laptop. Seafile also seems like a great choice, but haven't tested it yet.



Maps

OsmAnd is the best maps android application (yes better than Google maps), mostly due to its great offline feature. Map data come straight from the work of OpenStreetMap contributors. I always install OSMTracker to my phone to be able to contribute myself and GPSLogger to log my bike rides.



News

TTRSS-Reader is the android version of the well known Free Software RSS reader TinyTinyRSS. It will play along with both self hosted and 3rd party instances. Poche helps saving articles to "Read them later" on a Wallabag instance.



Chat

XMPP (Jabber) is the obvious choice for instance messaging. ChatSecure and Xabber are the best android apps for that job. Both support OTR for encrypted communication, but ChatSecure is better on this field since it can be combined with KeySync and sync your OTR keys with the ones you keep on your desktop client.



Documents / Ebooks

I prefer reading on my Kobo, but in case you want an epub reader FBReader will be a good choice. Document Viewer opens pdf documents (plays well with mail attachments).



Social / Microblogging

I use Twidere for Twitter. Great app. Supports StatusNet too. There is also a Diaspora Webclient app, that seems to just wrap Diaspora's mobile web interface.



VoIP

Guardian project has setup an SIP provider (Ostel.co) that just works, encrypting calls by default (aka ZRTP). They suggest CSipSimple for using this android, but I've tried Lumicall and works great.



All the software I mention here is stuff I use. I'm sure that in some cases you may find alternatives that better suit your needs. So dig deeper to F-droid for more apps and surf through FSFE's website.

I currently have an android smartphone that runs 100% Free Software applications. I can't think of missing any functionality so far and I certainly feel more secure ;)

(this post was traslated in Russian)