Personal field manual · private page

Hide Me

You won't become invisible, and chasing that wastes effort. The realistic win is raising the cost of watching you until you're not worth the trouble. Surveillance is a volume business on thin margins — friction is the lever.

Adapted from Mark Ramm's field guide to shrinking your data footprint and his Android hardening guide, reordered for your setup: Wisconsin (no state privacy law to lean on), a Yahoo inbox you use most plus two Gmail accounts and Google Maps + Drive, Brave browser, Proton VPN already running, a Samsung phone. Tick each step as you go — it all saves on this device.

◢ Already working for you

Proton VPN + NetShield (VPN box essentially ticked), Brave with Google Search + AI already dropped, and Bitwarden for passwords. That's three of the hardest habits already in place.

◢ Where you're most exposed

Your Yahoo inbox — most-used, and the worst major provider on privacy. Plus two Gmail accounts and Google Maps/Drive, data brokers reselling your WI details, and dumb radio signals (car, earbuds, watch) a phone can't mask.

0 done

The plan

Tonight

~30 min · biggest cost per minute

Toggles that break the cheapest, most automated tracking.

  1. Delete your advertising ID

    One shared tag ties every app to the same profile. Deleting it blinds the largest, laziest network overnight.

    Cost: high2 min

    Samsung: Settings → Security and privacy → Privacy → Ads → Delete advertising ID. Confirm it reads "deleted," not just reset.

  2. Put your Google account on a diet

    This account touches the most of your life. Turning off the history streams and auto-deleting the rest starves the profile at its source.

    Cost: high8 min

    At myaccount.google.com/privacycheckup, do each — location logging needs both of the first two, not just Location History:

    • Turn off Web & App Activity
    • Turn off Location History (Timeline)
    • Turn off Ad personalization
    • Set anything left to auto-delete every 3 months
  3. Tune up Brave

    You already use Brave, and you've dropped Google Search and AI — that's genuinely good enough. Brave blocks trackers, ads, and fingerprinting by default. Two tweaks and one caveat, no need to switch browsers.

    Cost: med5 min

    One caveat, not a dealbreaker: Brave rides on Chromium (Google's engine), so it doesn't dent Google's browser monopoly the way Firefox does. For your privacy goals it's fine — keep it, and set:

    • Set Shields to Aggressive (Settings → Shields, or tap the lion on a page)
    • Confirm default search is Brave Search or DuckDuckGo (Settings → Search engine)
    • Turn on Global Privacy Control (Settings → Privacy) — a legal "do not sell" signal
    • Optional: switch off Brave Rewards / crypto if you don't use it (Settings → Rewards)
  4. Move sensitive chats to Signal

    Content matters less than metadata — who you talk to, when, how often. Signal is the one mainstream app built to collect almost none of it.

    Cost: high5 min
    • Install Signal
    • Route the conversations that matter through it (you don't need everyone to switch)
    • Turn on disappearing messages for the sensitive threads

This week

~2–3 hrs · highest-impact work

Broker opt-outs are the single biggest footprint cut available to you — the free DIY route beats the paid services (~70% of records removed vs. ~35%). The worksheet is below; these are the phone settings to pair with it.

  1. Audit app permissions

    Most apps hold more access than they need. Downgrading location and revoking camera/mic from apps that don't use them shuts off passive collection.

    Cost: med20 min

    Samsung: Settings → Security and privacy → Privacy → Permission manager.

    • Set Location to Approximate / Only while using per app
    • Pull Camera and Microphone from apps that don't obviously need them
    • Enable auto-remove permissions for unused apps
  2. Kill Wi-Fi & Bluetooth scanning

    These keep locating you even with GPS off, by sniffing nearby networks and beacons. Off is a pure win — nothing lost day to day.

    Cost: med2 min

    Samsung: Settings → Location → Location services.

    • Turn off Wi-Fi scanning
    • Turn off Bluetooth scanning
  3. Harden the lock screen

    A strong passcode and hidden notification previews mean a seized or stolen phone doesn't spill its contents on the lock screen.

    Cost: med5 min
    • Use a PIN/password, not a 4-digit code (Security and privacy → Device unlock → Screen lock type)
    • Hide notification content on the lock screen (Notifications → Lock screen notifications)
  4. Switch off the profiling toggles

    Three settings quietly build a profile of you or ship your usage back to Samsung and Google. None is a security feature — turning them off costs you nothing but some AI "suggestions."

    Cost: med3 min

    Samsung: Settings → Security and privacy → More privacy settings.

    • Turn off Personal data intelligence — on-device AI that models you from calendar, contacts, call/text history, Gallery, location, Samsung Health; switching off deletes what it built
    • Turn off Send diagnostic data — usage telemetry to Samsung/Google
    • Turn off Android personalization service — profiles you to personalize suggestions and ads

This month

bigger lifts · situational

Larger changes and the habits that only matter in genuinely high-risk moments.

  1. Sort your inboxes — Yahoo first

    Your most-used account, Yahoo, is your weakest link — not a safer alternative to Gmail. It scans mail for ad targeting, it was the one major provider that secretly scanned all incoming mail for US intelligence in 2016, and its 2013 breach exposed all 3 billion accounts.

    Cost: highongoing

    Proton encrypts message contents but is not anonymity — under Swiss law it can be compelled for IP logs and payment data. Great against profiling; not a shield against a targeted order. Map your accounts:

    • Stand up Proton Mail as the new home for anything that matters
    • Yahoo: stop using for anything important; migrate its logins off it; keep only for legacy services
    • Gmail #1 → everyday (fine for Maps/Drive); Gmail #2 → junk, signups, newsletters
    • Turn on two-factor authentication on all of them (Bitwarden can store the codes)
  2. Rein in Google Maps & Drive

    Maps Timeline is a minute-by-minute diary of everywhere you go; Drive is your files sitting on Google's servers where they can be scanned or subpoenaed. Your stickiest Google dependencies.

    Cost: med20 min
    • For sensitive trips, use Maps signed out, or an offline app that doesn't phone home — Organic Maps or OsmAnd (Location History off also stops Timeline)
    • Move private files off Drive to Proton Drive or local encrypted storage; keep Drive for low-stakes stuff
  3. Stop signing in with Google

    "Sign in with Google" doesn't leak your activity to Google, but it makes one account the master key to your whole online life — the single point of failure you're trying to reduce.

    Cost: medongoing
    • For new sign-ups, use email + a Bitwarden-generated password (you already have it — it makes the unique password and autofills it), not the Google/Facebook button
    • Migrate the important existing ones (email, banking) off Google/Facebook login into Bitwarden; keep social login only for throwaways
  4. Disable 2G

    Cell-site simulators ("stingrays") work by forcing your phone down to insecure 2G. Turning 2G off removes that downgrade path.

    Cost: med2 min

    Samsung: Settings → Connections → SIM manager → tap your SIM → disable 2G (some builds: Connections → Mobile networks). Leave it off.

  5. Learn the "powered-off" habit

    A fully powered-off phone is dramatically harder to crack — the encryption keys aren't in memory. Your move before any genuinely high-risk situation.

    High-risk onlyhabit

    Before a protest, border crossing, or seizure risk: fully power off (not just lock). A restart forces your PIN on first unlock and disables biometric bypass. Highest tier: turn off fingerprint/face unlock so you can't be physically compelled to open it.

Structural

beyond your own device

Personal opt-outs treat symptoms. These target the engine — optional, civic, and where the problem actually gets fixed.

  1. Run a one-hour opt-out clinic

    Your effort scales when you teach it. One evening walking neighbors through the broker list multiplies the friction across a whole group.

    Multiplier1 evening

    Use EFF's Surveillance Self-Defense (ssd.eff.org) as free curriculum and the broker worksheet as the exercise. EFF's annual Opt-Out October is a ready-made template.

  2. Back the laws that close the loophole

    The government buys from brokers what it would need a warrant to seize. Two bills would cut that off; call your reps and name them.

    Systemic10 min

    The Fourth Amendment Is Not For Sale Act (passed the House, died in the Senate) bans government purchase of data that would otherwise need a warrant. The Banning Surveillance Advertising Act attacks the supply side. Ties into your repwatch civic work.

The broker worksheet

The heart of "this week." Do a handful a night. Each opens the broker's own opt-out page; most ask you to find your listing, confirm by email, and wait a few days. Wisconsin note: California's DROP tool isn't available to you, so this manual list is your route. Re-run every ~3 months — brokers re-scrape. Full master list: Yael Grauer's Big Ass Data Broker Opt-Out List.

0 of 17 brokers

Honest limits — so you spend effort where it pays