GrapheneOS doesn't include or use Google apps and services by default and + avoids including any other apps/services not aligned with our privacy and + security focus. Google apps and services can be used on GrapheneOS as regular + sandboxed apps without any special access or privileges through our sandboxed Google Play feature, but we don't + include those apps by default to give users an explicit choice on whether they + want to use those apps and which profiles they want to use it in.
+ +We change the default settings to prefer privacy over small conveniences: + personalized keyboard suggestions based on gathering input history are + disabled by default, sensitive notifications are hidden on the lockscreen by + default and passwords are hidden during entry by default.
+ +Some of our changes for attack surface + reduction can also improve privacy by default by not exposing unnecessary + radios, etc. by default and avoiding the impact of potential privacy bugs with + the hardware.
+ +By default, we also use GrapheneOS servers for the following services + instead of Google servers:
+ +We provide a toggle to switch back to Google's servers for connectivity + checks, attestation key provisioning and GNSS almanac downloads along with + adding proper support for disabling network time connections. This combines + with other toggles to allow making a GrapheneOS device appear to be an AOSP + device. This is only particularly important for connectivity checks since the + other connections get routed through a VPN which is needed to blend in on a + local network in practice.
+ +See our default connections FAQ entry + for much more detailed information.
+