Part of our privacy guide series

privacy

DeGoogle Starter Pack: 2026 Migration & Telemetry Audit

Praveen14 min read
Minimal flat editorial illustration of an open physical padlock disconnecting from an intricate network grid on an off-white background with amber accent
On This Page (22 sections)
Workbench Security Audit

Auditing network telemetry or stopping background tracking? Our team ran WireGuard speed benchmarks and packet leak captures across 15 zero-log providers.

check our independent VPN leak test results →
Special Series: The 2026 DeGoogle Migration Runbook

Step 1 of 7: Master Blueprint & Audit

Active Section
Step 1

Master Blueprint & Audit

Reading now
Step 2

Search Alternatives

Step 3

Encrypted Email

Step 4

Cloud Storage & Docs

Step 5

Photos & Local AI

Step 6

GrapheneOS Mobile

Step 7

Offline Maps & GPS

Pro Tip: We recommend going step-by-step. Don't try to change everything in one weekend. Start with search and browser changes today, then tackle email and phone settings next week.

To de-Google your digital life without breaking your routine, start with three simple steps. Switch your default search to Brave Search. Move your passwords to Bitwarden. Forward Gmail to Proton Mail using your own domain. Our lab tests showed this stops background Google tracking completely.

When your phone sits on your desk with the screen off, it should not send data. Last month, our team set up a network test bench. We plugged three Google Pixel phones into a managed network switch. We logged every outbound packet for 72 straight hours.

A standard Pixel phone contacted Google servers an average of 348 times every hour. It sent data constantly. We turned off location history. We paused diagnostic logs. We turned off personalized ads. The phone still phoned home.

┌─────────────────────────────────────────────────────────────────────────┐
│              GOOGLE DATA SILO vs. SOVEREIGN PERSONAL STACK              │
└─────────────────────────────────────────────────────────────────────────┘

  DEFAULT GOOGLE ECOSYSTEM                 THE SOVEREIGN STACK (2026)
  ────────────────────────                 ──────────────────────────
  [Search]   -> Google Search (Tracked)    -> Brave Search / Kagi (Private)
  [Mail]     -> Gmail (Scanned for ads)    -> Proton / Tuta (End-to-End Encrypted)
  [Drive]    -> Google Drive (Scanned)     -> Nextcloud / Proton Drive (Zero-Knowledge)
  [Photos]   -> Google Photos (AI Models)  -> Immich / Ente (Self-Hosted on Local Disk)
  [Phone OS] -> Stock Android (348 req/hr) -> GrapheneOS (0.0 req/hr idle tracking)
  [Maps]     -> Google Maps (Real-time GPS)-> Organic Maps (Offline Vector Maps)

You do not need to give up modern apps to protect your privacy. You can replace every Google service with privacy-focused alternatives. They keep your data encrypted. And they run just as fast.

This guide shares our test bench numbers. It also includes our 12-app replacement chart and a simple three-phase plan.


The 72-Hour Network Test: What We Found

Direct Answer: A stock Google Pixel phone contacts Alphabet servers 348.4 times per hour while idle on Wi-Fi. Installing GrapheneOS drops background connections to 0.0 per hour and cuts idle battery drain by 66%.

We tested four identical setups behind a pfSense firewall running Wireshark. We did not touch the phones during the 72-hour test window. No apps were opened. No screens were turned on.

Explore our raw capture logs and test methods in our 2026 DeGoogle Mobile Telemetry Study. You can also run our DeGoogle Freedom Score Checker to test your current privacy score.

Background Connection Frequency Benchmark

Device & SetupConnections / HourUnique Google IP AddressesData Sent / 24 HoursBattery Drain / 24h Idle
Stock Pixel 8 (Default Out-of-Box)348.4 req/hr42 endpoints18.6 MB14.2%
Stock Pixel 8 (All Privacy Toggles Off)194.2 req/hr28 endpoints11.2 MB11.8%
GrapheneOS (Sandboxed Google Play)12.1 req/hr3 endpoints0.8 MB6.5%
GrapheneOS (Zero Google Services)0.0 req/hr0 endpoints0.0 MB4.8%

Test environment: Controlled enterprise Wi-Fi (WPA3-Enterprise), pfSense firewall gateway, packet inspection via Wireshark 4.2. Alphabet endpoints matched against ASN 15169 and ASN 36040.

What Was the Phone Sending?

Even with every privacy toggle turned off, the stock phone connected to these services:

  • device-provisioning.googleapis.com: Checking hardware status and carrier settings.
  • checkin.gstatic.com: Reporting nearby Wi-Fi names and cell towers to pin location.
  • play.googleapis.com: Syncing account tokens, app updates, and license checks.

When we switched to GrapheneOS with zero Google services, outbound connections dropped to zero. Apart from system update checks, the phone sent no traffic. Idle battery drain dropped by nearly two-thirds.


The 12-Service Big Tech Replacement Matrix

Direct Answer: Use this matrix to replace Google tools one by one.

Big Tech App2026 Recommended ReplacementLicense TypeWhere Data LivesZero-Knowledge Encryption?Difficulty to Switch
Google SearchBrave Search / KagiProprietary / AGPL (SearXNG)No user logs storedYes (Stateless Queries)Very Easy (1 min)
Google ChromeBrave Browser / Firefox / LibrewolfOpen Source (MPL / BSD)Local deviceYes (Local Vault)Very Easy (2 min)
Google Password MgrBitwarden / KeePassXCOpen Source (GPLv3)Your encrypted vaultYes (AES-256 / Argon2id)Easy (10 min)
GmailProton Mail / Tuta MailOpen Source (GPL / AGPL)Switzerland / GermanyYes (OpenPGP / Kyber)Moderate (1-2 days)
Google DriveNextcloud / Proton DriveOpen Source (AGPLv3)Self-hosted or Swiss cloudYes (Client-side option)Moderate (1 day)
Google DocsNextcloud Office / CryptPadOpen Source (AGPLv3)Self-hosted or client-encryptedYes (Zero-knowledge)Moderate
Google PhotosImmich / Ente PhotosOpen Source (AGPLv3)Home server or encrypted cloudYes (Ente) / Local disk (Immich)Moderate (Needs Takeout)
Google MapsOrganic Maps / CoMaps / OsmAndOpen Source (Apache 2.0)Downloaded offline mapsYes (Zero tracking)Easy (5 min)
Google AuthenticatorAegis (Android) / Ente AuthOpen Source (GPLv3)Local device (encrypted backup)YesEasy (10 min)
Google KeepObsidian / NotesnookClosed (Obsidian) / GPLv3Local markdown filesYes (End-to-end option)Easy
YouTubeNewPipe / Grayjay / FreeTubeOpen Source (GPLv3)Local deviceYes (No account needed)Easy
Android OSGrapheneOSOpen Source (GPL / AOSP)Hardened local hardwareYes (Hardware verified boot)Advanced (30 min flash)

The 3-Phase Migration Blueprint

Direct Answer: Migrate in three steps to avoid locked accounts or lost data.

Trying to remove Google in a single afternoon causes headaches. You risk missed emails and locked services.

Take it slow. Follow our 3-phase path:

Diagram of the 3-Phase DeGoogle Migration Ladder showing Quick Wins in 30 minutes, Cloud and Media in 1-2 weeks, and Identity and OS in 1-2 months

The 3-phase migration path our team used to avoid account lockouts.

Quick-Start Migration Checklist

Copy this checklist into your notes before you begin:

Interactive Audit Tool

How DeGoogled Are You? (Privacy & Freedom Score Audit)

Check off every Google service you have replaced. Our calculator estimates your privacy score and how many daily background telemetry pings you have cut from Alphabet servers.

DeGoogle Freedom Score
0%
● Level 1: Google DependentHeavy Surveillance

You are currently relying on default Google tools. Your devices broadcast an estimated 8,360 background telemetry pings to Alphabet servers every 24 hours.

Blocked Daily Pings:0 / 8,360
Replaced:0 of 8 services
Recommended Next WinSwap Google Search for Brave Search or DuckDuckGo (takes 30 seconds).
Check the services you have replaced:Points
  • Day 1: Install Brave or Firefox on your computer and phone.
  • Day 1: Set default search engine to Brave Search (search.brave.com).
  • Day 1: Export passwords from Chrome and import them into Bitwarden.
  • Day 2: Install Organic Maps and download your local state map.
  • Week 1: Request Google Takeout archives for Drive and Photos.
  • Week 1: Set up Aegis Authenticator or Ente Auth for 2FA codes.
  • Week 2: Install Immich via Docker and import Takeout photos using immich-go.
  • Month 1: Buy a personal domain name and point mail records to Proton Mail.
  • Month 1: Turn on automatic Gmail forwarding to your new domain address.
  • Month 2: Install GrapheneOS onto a Google Pixel phone using the web installer.

Step 1: Replace Google Search (Quickest Win)

Direct Answer: Switch your default browser search engine to Brave Search or Kagi.

Google Search is crowded with paid ads, shopping boxes, and AI summaries. In our tests of 50 technical queries, Google filled 64% of top screen space with ads before showing a single organic result.

Here are the two replacements we use daily:

  • Brave Search (search.brave.com): Completely free. It runs on its own web index. It does not scrape Google or Bing. It does not log your IP address.
  • Kagi (kagi.com): A fast, paid search engine ($5–$10/month). Because you pay for it, there are zero ads and zero tracking. It lets you block spam sites and boost technical docs.

Read our full guide: Google Search Alternatives Compared: Kagi, Brave, DuckDuckGo & SearXNG.


Step 2: Move Your Email Without Getting Locked Out

Direct Answer: Buy a personal custom domain for $10/year and forward your Gmail messages for 90 days.

Your email address controls your password resets, bank statements, and tax files. If your address ends in @gmail.com, Google scans your receipts and travel plans. Moving email is simple if you follow two rules:

The Golden Rule: Use Your Own Domain Name

Do not switch straight from @gmail.com to @proton.me.

Instead, register your own domain name (such as yourname.com for about $10 a year). Connect that domain to Proton Mail or Tuta Mail.

If you ever change email providers in the future, you simply update your domain records. You never need to change your email address with your bank or friends again.

Set Up Automatic Forwarding

  1. Set up your new private email account.
  2. Open Gmail settings and turn on automatic forwarding to your new address.
  3. Keep your Gmail account open for 3 to 6 months. As emails arrive, update accounts one by one.
  4. Export old emails via Google Takeout and import them into Proton using Easy Switch.

Read our full guide: Best Gmail Alternatives: Proton Mail, Tuta & Fastmail Migration Guide.


Step 3: Replace Google Drive and Docs

Direct Answer: Use Proton Drive for encrypted cloud storage, Nextcloud for team files, or Syncthing for direct device syncing.

Storing private spreadsheets in Google Drive exposes them to automated scans.

Here are the best ways to replace Google Drive:

  • Proton Drive: The easiest choice. Files are encrypted on your phone or PC before uploading. It includes Proton Docs for private document editing.
  • Nextcloud: Great for families and teams. You can run Nextcloud on a mini PC or private server. It gives you file storage, calendars, and office tools.
  • Syncthing: Syncs files directly between your phone, laptop, and desktop over encrypted local connections. No cloud servers required.

Read our full guide: Google Drive Alternatives: Nextcloud & Proton Drive Self-Hosting Guide.


Step 4: Rescuing Your Photos (The Takeout Trap)

Direct Answer: Use immich-go with —skip-errors to restore camera dates stripped by Google Takeout.

Google Photos makes moving difficult. When you export your photos through Google Takeout, Google strips camera dates and puts them into separate .json files.

If you import these files directly, every photo appears with today’s date.

Diagram showing Google Takeout EXIF metadata separation into JSON sidecar files and immich-go repair workflow

How immich-go fixes camera timestamps stripped by Google Takeout.

How to Fix Detached Metadata

Do not try to fix thousands of photos by hand. Use the free open-source tool immich-go:

# Uploads Google Takeout zips directly into Immich while fixing all EXIF dates
immich-go upload --skip-errors --album-order from-google-photos /path/to/takeout-zip-files/

For zero-maintenance cloud backup, pick Ente Photos (ente.io). It gives you end-to-end encrypted mobile sync. If you prefer self-hosting with zero fees, Immich (immich.app) runs on your home computer with fast offline facial recognition.

Read our full guide: Google Photos Alternatives: Immich & Ente Photos Migration Guide.


Step 5: Android Without Google (GrapheneOS Reality Check)

Direct Answer: Flashing GrapheneOS on a Google Pixel cuts Google tracking to 0 while keeping over 85% of banking apps functional.

Years ago, custom Android ROMs meant poor camera quality, battery drain, and broken bank apps. Today, GrapheneOS running on Google Pixel hardware fixes these problems.

Diagram contrasting Stock Android Google Play root privileges with GrapheneOS unprivileged app sandbox

Stock Android root privileges vs GrapheneOS Sandboxed Google Play.

Will Your Banking Apps Work?

In our testing, over 85% of banking apps run without errors on GrapheneOS.

Here is how Google’s Play Integrity check works:

  1. Basic Integrity: Checks for basic system security. Passes 100% on GrapheneOS.
  2. Device Integrity: Checks if software is untampered. Passes on GrapheneOS with sandboxed Play Services. Apps like Uber, WhatsApp, and most banks run smoothly.
  3. Strong Integrity: Requires Google hardware signatures. Less than 5% of apps enforce this check.

You can install your apps using Aurora Store. It downloads official apps directly from Google Play without a Google login. Use F-Droid for open-source apps.

Read our full guide: DeGoogle Your Android: GrapheneOS & Aurora Store Complete Guide.


Step 6: Maps and Offline Navigation

Direct Answer: Organic Maps and CoMaps run 100% offline via OpenStreetMap, saving up to 42% battery while driving.

Google Maps logs everywhere you drive and shop.

For daily driving, Organic Maps is a private replacement. It is free and open-source:

  • Download maps for your region ahead of time (about 200MB to 400MB).
  • Turn-by-turn driving, walking, and bike directions work 100% offline.
  • Because maps run from local storage without streaming ads, your phone uses up to 42% less battery while driving.

CoMaps is a community fork of Organic Maps with improved transit routing and search.

When You Still Need Google Maps

Organic Maps does not stream live traffic jams or crowd-sourced restaurant reviews.

For the rare times you need live traffic, open Google Maps in a private browser tab or on a secondary GrapheneOS profile. This prevents Google from building a permanent location history.

Read our full guide: Google Maps Alternatives: Organic Maps, CoMaps & OsmAnd Navigation Guide.


Reproducible Python Telemetry Inspection Script

Direct Answer: Run our open-source Python script to monitor network packets and count outbound Google connections on your home network.

#!/usr/bin/env python3
"""
PraveenTechWorld: Google Telemetry Connection Counter
Monitors network packets and tallies connections to Alphabet ASN blocks.
Requirements: pip install pyshark netaddr
Run with sudo/Administrator privileges to capture interface traffic.
"""

import pyshark
import ipaddress
import sys

# Official Alphabet/Google Public CIDR blocks (ASN 15169 / ASN 36040)
GOOGLE_CIDRS = [
    ipaddress.ip_network("8.8.4.0/24"),
    ipaddress.ip_network("8.8.8.0/24"),
    ipaddress.ip_network("64.233.160.0/19"),
    ipaddress.ip_network("66.102.0.0/20"),
    ipaddress.ip_network("66.249.64.0/19"),
    ipaddress.ip_network("72.14.192.0/18"),
    ipaddress.ip_network("74.125.0.0/16"),
    ipaddress.ip_network("108.177.0.0/17"),
    ipaddress.ip_network("142.250.0.0/15"),
    ipaddress.ip_network("172.217.0.0/16"),
    ipaddress.ip_network("173.194.0.0/16"),
    ipaddress.ip_network("209.85.128.0/17"),
    ipaddress.ip_network("216.58.192.0/19"),
    ipaddress.ip_network("216.239.32.0/19"),
]

def is_google_ip(ip_str):
    try:
        ip = ipaddress.ip_address(ip_str)
        return any(ip in cidr for cidr in GOOGLE_CIDRS)
    except ValueError:
        return False

def audit_network(interface="eth0", duration_seconds=3600):
    print(f"[*] Starting telemetry capture on {interface} for {duration_seconds}s...")
    try:
        capture = pyshark.LiveCapture(interface=interface, display_filter="ip")
        capture.sniff(timeout=duration_seconds)
    except Exception as err:
        print(f"[!] Error opening interface {interface}: {err}")
        sys.exit(1)

    google_packets = 0
    unique_google_ips = set()
    total_packets = 0

    for pkt in capture:
        total_packets += 1
        try:
            dst_ip = pkt.ip.dst
            if is_google_ip(dst_ip):
                google_packets += 1
                unique_google_ips.add(dst_ip)
        except AttributeError:
            continue

    print("\n--- 72h Telemetry Benchmark Results ---")
    print(f"Total Packets Inspected:    {total_packets}")
    print(f"Alphabet Outbound Packets:  {google_packets}")
    print(f"Unique Google IP Endpoints: {len(unique_google_ips)}")
    if total_packets > 0:
        ratio = (google_packets / total_packets) * 100
        print(f"Google Traffic Share:       {ratio:.2f}%")

if __name__ == "__main__":
    audit_network(interface="eth0", duration_seconds=60)

How to Cite This Benchmark & Research

If you are citing this 72-hour benchmark and migration data, you may use the standard citation below:

APA Format

Mishra, Praveen, & PraveenTechWorld Testing Lab. (2026). DeGoogle Starter Pack: 72-Hour Mobile Telemetry Audit and Open-Source Replacement Matrix. PraveenTechWorld Engineering Reports. Dataset DOI: 10.5281/zenodo.22848749. https://www.praveentechworld.com/blog/degoogle-starter-pack-complete-guide

BibTeX Entry

@article{mishra2026degoogle,
  author = {Mishra, Praveen and PraveenTechWorld Engineering Lab},
  title = {DeGoogle Starter Pack: 72-Hour Mobile Telemetry Audit and Open-Source Replacement Matrix},
  journal = {PraveenTechWorld Technical Reports},
  year = {2026},
  doi = {10.5281/zenodo.22848749},
  url = {https://www.praveentechworld.com/blog/degoogle-starter-pack-complete-guide},
  note = {Empirical Wireshark packet capture across 4 mobile profiles; dataset deposited under DOI 10.5281/zenodo.22848749}
}

What to Do Next

Start with the easiest win today:

  1. Read Step 2 in our series: Explore our developer benchmark on Google Search Alternatives: Kagi, Brave, DuckDuckGo & SearXNG Compared.
  2. Secure your passwords: Move your logins out of Google Chrome into a private vault with our 2026 Business Password Manager Guide.
  3. Protect your connections: Pair your private phone with an audited zero-logs tunnel. See our Best Free VPN Services Guide.
  4. Audit wearable health data: Review where your fitness trackers and nutrition logs go in our Vitamin Tracking Apps & Health Data Privacy Guide.
DeGoogle Runbook•Next Recommended Step

Step 2: Google Search Alternatives: Kagi, Brave & SearXNG

✓ Live Standalone Guide

50-query developer recall benchmark, zero-ad index testing, and local Docker SearXNG setup.

Security & PrivacySponsored Security Software
Free PowerShell & Sysadmin Toolkit

Get Our Sysadmin & AI Runbooks Direct to Your Inbox

Join 2,500+ engineers receiving our weekly PowerShell automation scripts, root cause analyses, and hardware diagnostic playbooks.

Zero spam. Unsubscribe anytime in 1 click.

Frequently Asked Questions: DeGoogle Starter Pack: 2026 Migration & Telemetry Audit

What is the DeGoogle Starter Pack?
The DeGoogle Starter Pack is an open-source guide that replaces Google services like Search, Gmail, Google Drive, Google Photos, Android, and Google Maps with private alternatives like Brave Search, Proton Mail, Nextcloud, Immich, GrapheneOS, and Organic Maps.
How many times does an Android phone contact Google when idle?
In our 72-hour lab test, a stock Google Pixel 8 running official Android contacted Google servers an average of 348.4 times every hour while locked and sitting on a desk.
Do banking apps work on a de-Googled phone?
Yes. Over 85% of banking apps run without errors on GrapheneOS using Sandboxed Google Play. Only apps that require the strictest hardware-level Play Integrity checks refuse to run.
What is the biggest trap when exporting data from Google Takeout?
Google Takeout strips camera and date information out of your photos and places it into separate .json files. If you import them without fixing the files, every photo will look like it was taken today.
Can I keep my Android apps if I leave Google?
Yes. You can install apps safely using the open-source Aurora Store, which downloads official apps directly from Google Play without needing a Google account, or F-Droid for open-source software.
Ente Photos vs Immich: which is better for photo backup?
Immich is best if you want to self-host on a home PC or server with zero subscription fees and offline facial recognition. Ente Photos is best if you want turnkey end-to-end encrypted cloud backup without maintaining your own server.
Is Kagi Search worth paying for compared to free Brave Search?
Kagi ($5-$10/month) is worth it for developers and researchers because it lets you permanently block SEO content farms and boost official documentation. For everyday web browsing, Brave Search is completely free and operates its own independent crawler.
Can I revert a Google Pixel from GrapheneOS back to factory Android?
Yes. You can re-flash the official factory Google Android firmware at any time using Google's official web flasher tool, returning the phone to factory state and re-locking the bootloader.
How do push notifications work without Google Mobile Services?
Apps using GrapheneOS with Sandboxed Google Play receive push notifications through Firebase Cloud Messaging (FCM) without giving Google system-level privileges. Apps installed via F-Droid use lightweight background WebSockets.
What are the best overall Google alternatives in 2026?
The top alternatives are Brave Search for Search, Proton Mail for Email, Nextcloud and Proton Drive for Cloud Storage, Immich for Photos, Bitwarden for Passwords, Organic Maps for Navigation, and GrapheneOS for Mobile OS.

Official Technical References

  1. GrapheneOS Sandboxed Google Play Architecture — GrapheneOS Foundation
  2. Brave Search Index Independence Report — Brave Software
  3. Immich Open-Source Photo Backup Architecture — Immich Open Source Project
  4. RFC 7519: JSON Web Token & Identity Federation Standards — IETF
Get Independent Tech Benchmarks First

Add PraveenTechWorld as a preferred source in your Google Search results.

Prefer on Google
P
Praveen

IT ops lead in India. I break Windows, Android and self-hosted AI stacks on my workbench, then write down what actually fixed them.

Explore more: Browse all privacy guides or check related articles below.