Using GrapheneOS, my main profile has a handful of apps from PlayStore(Aurora): 1password, ProtonVPN, ProtonMail, etc.
I think I read somewhere that, for an app to appear in PlayStore, it must be compiled with linked libraries that implement check-ins with Google infrastructure… or something like that.
Obviously I’d expect apps like 1password and Proton to be “less evil,” but am curious whether everything from playstore leaks telemetry, or if it’s just “up to the developer”.
(in my case, I don’t have Google services or apps in the main profile at all)
FWIW, you can install the entire proton suite with Obtainium. For whatever reason though, 1password exclusively distributes through the Google play store, but AFAIK that doesn’t make the app itself any less private.
Can you? I just looked into this this other day and I didn’t see proton calendar on github, it was just an apk you could download on protons site
Looking at Proton calendar, it seems I just put the website into Obtainium, I think there’s a monorepo somewhere, but I couldn’t find it.
Huh, okay, I thought it had to be a github repo. I’ll look into that. Thx.
Why not just use Proton Pass?
Because you should have your email, password manager, and authenticator be 3 different services. Otherwise there is 1 point of failure.
My understanding is the password manager is fully local to the device. Its only compromise-able if you back it up to their cloud. Same goes for the authenticator.