P PrivacyPhones

The Privacy Phone Hierarchy

A practical, opinionated ranking. Not about perfection — about reducing risk and choosing tradeoffs consciously.

S Tier — Best overall

S Tier

Strong security model, fast updates, and excellent day-to-day compatibility.

GrapheneOS on Pixel

Pixel 9 Pro / 9 / 8a are strong picks.

A Tier — Great choices

A Tier

Privacy-forward defaults with broader device options; tradeoffs vary by model and update pipeline.

/e/OS (Murena devices)

Good mainstream UX; less hardening than GrapheneOS.

iodéOS

Good built-in trackers blocking; verify update cadence per device.

B Tier — Niche, depends on your workflow

B Tier

Can be good for certain users, but ecosystem, price, or long-term support may be less clear.

Punkt MC03
HIROH
Jolla / Sailfish

C Tier — Compromises / different category

C Tier

Often less compelling as a primary privacy choice; may still fit specific needs.

Unplugged UP Phone
Light Phone III

Minimal phone category; privacy benefits are indirect.

Purism Librem 5

Linux-first; daily-driver compromises are significant.

Dead — Avoid for new setups

Dead Tier

Discontinued or not recommended for new users due to support/security concerns.

CalyxOS
DivestOS

How we think about tiers

  • Security update pipeline and exploit mitigations matter more than marketing.
  • Usability affects privacy: if it's painful, people bypass it.
  • Threat models vary — the best phone for a journalist differs from the best phone for a casual user.