Okay so. One day it hit me that every app on my phone is basically a tiny casino designed by a guy named Chad with a psychology degree, and I decided enough was enough. I didn’t do this the normal way (deleting apps, “digital detox,” touching grass). I did it the unhinged engineer way: I built myself a whole defense-in-depth security posture against my own phone, from scratch, because that’s just how my brain works. Here’s the stack.

Layer 0: The Operating System Itself, Because I Don’t Do Things Halfway

Before any of the other layers, I threw out stock Android entirely and put GrapheneOS on my phone, then sandboxed apps so they don’t get to just wander around my phone touching everything they want. Yes, this is overkill for “I want fewer notifications.” No, I will not be taking questions. Some people rearrange furniture to feel in control of their life, I reflash my operating system.

Layer 1: The App Launcher That Pretends Nothing Exists

I installed a minimal launcher and just… hid everything. Home screen is now a blank slate with maybe four apps on it, none of which are Instagram. If I want Google I have to actively search for it, type its name, and sit with the shame of that decision in real time. Turns out “one extra step” is enough friction to make me go “eh, never mind” and put the phone down. My phone now has the emotional warmth of a Nokia 3310 and I have never felt more free.

Layer 2: Outsourcing My Inbox Triage to an AI Because I Don’t Trust Myself

I have Claude sort my email and quietly relocate anything unimportant to a folder I have never once opened and never will. Promotional emails, “influencer partnership opportunities,” 47 newsletters I definitely didn’t sign up for — gone, into the void, out of sight. My inbox is now just: actual humans, actual bills, actual problems. Everything else gets triaged by an AI with zero emotional investment in whether I open a 30%-off email from a candle brand.

Layer 3: A Notification Manager With Trust Issues

Nothing gets through unless I explicitly say it can. No badges, no banners, no little red dots whispering “check me, check me” from across the room. If I’m not looking at my phone, my phone does not get to have opinions about that. This is the digital equivalent of telling every app “you may speak when spoken to.”

Layer 4: DuckDuckGo Only, No Exceptions

I switched my default browser to DuckDuckGo and just… stayed there. No tracking, no algorithm quietly building a shadow profile of me based on how long I hover over a pair of shoes. If I want to be manipulated into buying something, I’d at least like it to be my own decision and not the result of nine months of ad-retargeting warfare.

Layer 5: Fingerprint-Locking Every Single App Like It’s a Bank Vault

I run Bitdefender Mobile Security with everything cranked to the highest setting and every app individually locked behind my fingerprint. Doesn’t matter if it’s my banking app or a flashlight app, if it wants to open, it better recognize my thumb first. This means even if someone physically has my unlocked phone in their hands, they still hit a wall at every single app. Overkill? Maybe. But “maybe” isn’t a word that exists in my vocabulary when it comes to my own devices.

Layer 6: DNS That Doesn’t Snitch

I run Quad9 as my DNS provider, which blocks known malicious domains before they even load and doesn’t sell my browsing habits to the highest bidder. This one’s less about willpower and more about making sure the internet itself isn’t quietly working against me in the background while I’m busy fighting my own apps.

Layer 7: The Meatspace Version of All of This

Here’s the thing though — it’s not just the phone. I live alone with my cat, and my front door has three layers of locks on it, because apparently my hardening instincts don’t stop at the digital world. My cat has zero opinions about threat models and just wants dinner, but I still lock up like I’m guarding a server room. Consistency is important to me, okay. Surprisingly, the people I actually know in my building are limited to the security guards I say hi to, and maybe one or two others I genuinely could not tell you why I know them. In my defense, my actual job is IC design engineering, and my hobbies are “read about security” and “try weird new tech,” so most of my hours go to a laptop, a phone, and a lot of tabs. I have not yet figured out how to teleport, so socializing with the whole building, or with friends of friends of friends, was never really on the table to begin with. Honestly if you’re holding a phone in public and wearing a mask, I would not have the faintest idea who you are.

The Vibe Check

None of this makes me some kind of off-grid mystery woman living in the woods with a flip phone. I still use my phone constantly! I just made it so the phone has to work a little harder to get my attention, instead of me having to work hard to not give it. At this point “harden everything” is less a security philosophy and more a personality trait. Turns out most “digital manipulation” isn’t some 4D chess mind game — it’s just defaults. Change the defaults, change the game.

Also, quick PSA: at this point my setup is locked down enough that if you ever see something private of mine floating around in public, that’s not me. That’s a ghost. I don’t know her. Take it up with the ghost. At this point, only a nation-state actor could accidentally get into my phone — and even then, they’d probably just accidentally hand the tools over to my neighbors instead.

Anyway. If your phone currently knows more about your emotional state than your therapist does, maybe steal one of these. No permission needed, this isn’t proprietary tech, it’s just spite with extra steps.

My friend calls the whole setup the 4am notification armistice. Nobody signed anything, but the phone hasn’t woken me since.