2019-09-23-upgrading-providers.html (7403B) - raw
1 <!-- title: Upgrading to privacy-conscious providers --> 2 <!-- slug: upgrading-providers --> 3 <!-- categories: Cryptography, Decentralization, Privacy --> 4 <!-- date: 2019-09-23T00:00:00Z --> 5 <!-- lastmod: 2019-09-24T00:00:00Z --> 6 7 <p> 8 I have been reading a lot about decentralization and not depending too much in one company in the 9 past six months and I realized how much I relied on Google: my email, all my files, contacts, 10 calendars, pictures... Most of my data was stored on their servers. This was inconvenient for 11 three reasons: (1) if something was to happen to Google or my account, I would lose a lot of data, 12 (2) Google doesn't use end-to-end encryption, which means that they (and anyone with access to 13 their servers) can see all my files, emails, etc. and (3) Google already uses all this data (and 14 other it collects) to better know my personality.</p> 15 <!-- /p --> 16 17 <p> 18 Some people might think that the main three problems I have with Google aren't that important. In 19 fact, I have used Google for many years because that was my opinion for a long time. However, the 20 more I read about the issue, the more I realize they aren't minor problems. I realized that for me 21 it is worth it to pay $12 or $24 a year in exchange for privacy. If you are still doubting, <a 22 href="https://www.gnu.org/proprietary/malware-google.html">this post</a> might change your 23 mind.</p> 24 <!-- /p --> 25 26 <hr /> 27 28 <p>Let's see what I needed out of my new providers/configuration:</p> 29 30 <ol> 31 <li>Control over my data: if something were to happen to my account, it shouldn't affect me too much.</li> 32 <li>Encrypting my data: end-to-end encryption for my services, so there wasn't a need to "trust" 33 the provider, as well as to avoid any problems in case the servers were compromised—which is not 34 that uncommon.</li> 35 <!-- /li --> 36 <li>Privacy: the provider shouldn't be using my data in any way (which is mostly solved with end-to-end encryption).</li> 37 </ol> 38 39 <h3>1. Control over my data</h3> 40 41 <p> 42 My first problem was easily solvable, I simply needed to back up everything that was on the cloud. 43 That process was pretty easy using <a href="https://takeout.google.com/">Google's export tool</a>. 44 With a few clicks, everything was ready, and I only had to wait for Google to collect all the data 45 and create the file. I'm not sure how much that took, I would say less than an hour, but 46 definitely less than a day (it was a long ago, so I don't remember).</p> 47 <!-- /p --> 48 49 <p> 50 Selecting all the different services I wanted to export from one page instead of having to go to 51 each service's URL and then select export made the process so much smoother. I was surprised by 52 how easy the export was, and all the data was in convenient files to import to other services: 53 contacts in a VCF file, calendar in an iCal file... which makes a lot of sense, but not all 54 services allow such an easy process to export everything and ready to use in a different service. 55 Fortunately, that was the case, so my next problem was a lot easier to solve.</p> 56 <!-- /p --> 57 58 <h3>2. Encrypting my data</h3> 59 60 <p> 61 In order to encrypt my content, I needed to find an alternative to a lot of services that Google 62 was offering me (or use tools such as <a href="https://cryptomator.org">Cryptomator</a>, which was 63 discarded because of problem number 3). And so the search began.</p> 64 <!-- /p --> 65 66 <h4>Email</h4> 67 68 <p> 69 There are a lot of encrypted mailboxes and there is also the option of self-hosting email. I 70 wasn't interested in managing my own server just for my email, so I had to choose a provider. Many 71 of the sources I checked recommended <a href="https://protonmail.com">Protonmail</a> and <a 72 href="https://tutanota.com">Tutanota</a>, among others. They both looked nice and offered a free 73 tier, so I tried them. After some time, I finally decided to go with Tutanota because of how they 74 approached their user community as well as other details (for instance, their app not using any of 75 the Google Play Services), although it was a hard choice.</p> 76 <!-- /p --> 77 78 <h4>File storage</h4> 79 80 <p> 81 Most of my files in the cloud were old and not usually needed, they were just online because I 82 used Google Drive as my home folder. The solution was easy: I backed them up on an offline 83 external storage as well as on my computer and deleted them from the cloud.</p> 84 <!-- /p --> 85 86 <p> 87 As for the few files I actually needed online (the ones I use both at home and at college), I now 88 use a USB stick to have them wherever I go, as well as backing them up every once in a while. No 89 need to have them online, and it is faster to plug in a USB stick than log in to Google Drive and 90 download the files (which was what I was doing on all computers running GNU/Linux).</p> 91 <!-- /p --> 92 93 <p> 94 There is one type of file I haven't replaced yet: anything that was shared is still on my Drive 95 (even if other services offer it, for now, I am fine with using Google).</p> 96 <!-- /p --> 97 98 <h4>Calendar and contacts</h4> 99 100 <p> 101 I created an account in a Nextcloud instance for my calendar and contacts. Nextcloud is very 102 intuitive and I like the user interface. There's the <a href="https://www.davx5.com">DAVx⁵</a> app 103 that synchronizes them to my phone, so that was an easy choice. Having an account at a Nextcloud 104 instance is also useful in case I want to upload files and it also allows me to sync my <a 105 href="https://joplinapp.org">Joplin</a> notes.</p> 106 <!-- /p --> 107 108 <h4>Search</h4> 109 110 <p> 111 I thought the search engine would be the hardest service to substitute, however, there are a lot 112 of good alternatives. The one I went for is <a href="https://duckduckgo.com">DuckDuckGo</a> which 113 works pretty well and also works if you are connected to the internet through the <a 114 href="https://www.torproject.org">Tor network</a>.</p> 115 <!-- /p --> 116 117 <h4>Others</h4> 118 119 <p> 120 I never had to substitute the web browser since I already used <a 121 href="https://www.mozilla.org/firefox/">Firefox</a>, and as for the photo hosting service, I just 122 don't upload them online anymore and I use the <a 123 href="https://www.simplemobiletools.com/gallery/">Simple Gallery</a> app (you can install it for 124 free from <a 125 href="https://f-droid.org/en/packages/com.simplemobiletools.gallery.pro/">F-Droid</a>). I also 126 substituted Android's custom ROM, but I will talk about that some other time.</p> 127 <!-- /p --> 128 129 <h4>Temporarily not replaced</h4> 130 131 <p> 132 I temporarily haven't replaced one service: Google Maps. Its accuracy is so good that it is hard 133 to match. I have downloaded <a href="https://osmand.net/">OsmAnd</a>, but when searching for 134 public transport routes, I still check Google Maps.</p> 135 <!-- /p --> 136 137 <h3>3. Privacy</h3> 138 139 <p> 140 When looking for all the new services in order to get end-to-end encryption, I already looked at 141 their policies in relation to privacy, so this problem was solved as well.</p> 142 <!-- /p --> 143 144 <h2>Conclusion</h2> 145 146 <p> 147 It took me some time to make all these changes, especially my phone's operative system and my 148 email address—I still use the old one with a lot of people, I am progressively updating it. Some 149 of the services are hard to replace and it takes time to get used to the new providers. However, 150 if you are interested in getting privacy when sending personal emails or saving files online, it 151 is worth the change.</p> 152 <!-- /p -->