Private Phone Setup in 2026: GrapheneOS, Phreeli, and SimpleX

At a glance

Six layers narrow identity; residual records still cross out. The stack reduces identity exposure layer by layer; it does not remove tower-visible IMEI, ICCID, and IMSI records, provider-side order records, location habits, or endpoint risk.

Sources

1. 1. grapheneos.org · web
2. 2. mullvad.net
3. 3. mullvad.net · android
4. 4. cakewallet.com

Data behind this diagram

Private phone stack layers and residual records

Layer	Control in the stack	Residual record or exposure
Device	GrapheneOS without a Google account; per-app controls	Hardware identity, IMEI in use, physical seizure, and endpoint compromise
Carrier	Lower-data Phreeli or Silent.Link account	Tower location, IMEI, ICCID, IMSI, call-detail and payment records documented by the provider
VPN	Mullvad account number, WireGuard, always-on VPN	VPN account, tunnel endpoint, timing, and device compromise
Number	Separate JMP or carrier number when required	Telephony metadata, provider records, and number acceptance limits
Messaging	SimpleX, Session, or Briar without a phone-number identifier	Contact behavior, endpoint state, and each network's documented records
Finance	Self-custody wallet separated from the main identity	Provider order, counterparty, device, and behavioral records outside the wallet

Scroll →

Your phone tracks location, contacts, payments, and habits. The default setup shares much of that with the OS vendor, the carrier, app companies, and anyone who can demand records. This stack cuts those links one layer at a time.

Layer 1 - The device: GrapheneOS on Pixel

The base layer is the operating system. Stock Android and iOS ship with telemetry, carrier hooks, and account plumbing you do not control. GrapheneOSstrips that back and adds hardening, per-app network and sensor controls, sandboxed Google Play, and verified boot on Pixel hardware.

GrapheneOS only supports Google Pixel devices. That is deliberate. Pixels have strong hardware security, verified boot, and long update windows. In early 2026, the Pixel 8a is the obvious value pick. The Pixel 8 and 9 series are also solid.

Key GrapheneOS hardening steps after install:

• No Google account - use Sandboxed Google Play without signing in, or skip it
• Per-app network controls - cut internet access for apps that do not need it
• Per-app sensor controls - block mic, camera, GPS, and other sensors app by app
• Auto-reboot timer - set 18 to 72 hours so keys leave RAM after a reboot
• Duress PIN - use a secondary PIN that wipes the device
• USB-C locked when screen is off - block easy physical attacks
• Camera and microphone permissions - deny app access through Android's permission controls

For the full install and hardening guide, see: GrapheneOS: The Privacy Phone Guide.

Layer 2 - The carrier: anonymous mobile service

A hardened OS does not fix an identity-linked carrier. The carrier still knows which towers you connect to and when. Major carriers also have a history of turning location data into a product. The goal is to use a provider that has little or nothing about you on file.

US: Phreeli is a carrier product with a US number, voice, SMS, and data whose baseline signup asks for a ZIP code and payment rather than identity documents. Its current terms generally mention cards and discuss cryptocurrency only conditionally; the reviewed official pages do not establish current Monero or shielded-Zcash availability. The terms reserve the right to request more, require name and address for physical devices, and the privacy policy documents the network records it keeps. It narrows the account link; it does not make the line anonymous.

Global: Silent.Link provides an eSIM with no account, Monero accepted, across 160+ countries. Buying over Tor keeps the purchase session out of the picture; the carrier network still records device and SIM identifiers in use.

Layer 3 - The VPN: encrypt above the carrier

An anonymous carrier helps with account identity. A VPN helps with traffic visibility. Without a VPN, the carrier can still see which IPs and domains you reach.

Mullvad VPN fits this layer: no email, a random account number, Monero and cash accepted, and WireGuard support. Install the Android APK from mullvad.net or through Sandboxed Google Play.

Layer 4 - The number: when you need a phone number

Some services still demand a number for sign-up, 2FA, or recovery. If you must use one, do not use your main line.

For a number to keep, JMP.chat runs over Wi-Fi or data through an XMPP client, and Phreeli provides a real mobile line under the terms described above. Both are telephony, so call and message metadata and carrier or lawful-request exposure apply.

Layer 5 - Messaging: communicating without a phone number

Messengers that ask for neither a phone number nor an email address keep the identifier out of the setup. The recorded field for GrapheneOS users:

SimpleX Chat assigns no user identifier at all; contacts connect through a shared QR code or link, and relays move traffic without holding a stable identity. Its record notes UK jurisdiction and Village Global among its investors.

Session routes over an onion network, so the relay layer learns less, at some cost in speed. Its record notes the Quarkslab audit and the move to a Swiss foundation.

Briar runs peer-to-peer over Tor with no central server and can relay over Bluetooth or Wi-Fi in local conditions. Its record notes the public-interest grant funding behind the project. Its July 2026 maintenance notice says the project will provide only essential security updates and bug fixes.

Layer 6 - Finance on the device

A privacy phone should also handle money without dragging identity back in. The goal is simple: hold and spend from wallets that are not tied to your main identity.

• Cake Wallet - open source, supports XMR, ZEC, and BTC in one app. Good default mobile wallet.
• Monerujo - Android-only Monero wallet, open source, with Tor support and a tighter XMR focus.
• Feather Wallet - desktop Monero wallet with Tor built in. Keep larger balances there and move spending amounts to mobile.
• Zodl (formerly Zashi) - Zcash shielded wallet built for z-to-z transfers. A natural fit if you already use ZEC.

For P2P acquisition without KYC, Haveno is the Monero-native DEX. It runs over Tor and lets you acquire XMR from peers without an account.

Putting it together: the full stack

What this stack reduces, and what it does not

The stack narrows identity at the layers under the user's control: the OS account and telemetry, the carrier account link, the VPN account, the messenger identifier, and the wallet. Each provider still keeps whatever its terms document, and the carrier layer in particular retains network records even when the account asks for little.

What it does not address:

• Network identifiers: the tower sees the device IMEI and the SIM ICCID and IMSI in use, whatever the account collected. Phreeli's own privacy policy documents these records.
• Physical seizure of the device: encryption, a short auto-reboot timer, and a duress PIN are the relevant controls.
• Behavioral patterns: timing, location habits, and contact graphs can identify a user independent of any account.
• Endpoint compromise: installed malware or hands-on access defeats the layers above it.

Cunicula receives no funding from government agencies, political organizations, or financial services companies.