A privateIDAHO's Surveillance Survival Guide
May tech be checked by chains of ephemeral cryptographic record 🔐
We live in an era of unprecedented surveillance
Everything we do online is monitored. Every click, pause, scroll and stream. Every network connection and cell tower ping. All of it logged, shipped and sold as rich behavioral profiles to anyone buying, including local, state and national governments.
None of what follows is illegal, and none of it is hidden. It is simply the default: the convenient solution offered by major technology companies, retailers and telecommunications providers. Carriers sell location and call metadata. Retailers sell purchase histories. Google and ISPs sell website lookups and email inboxes, and Meta deals in every piece of content any user engages with, ever. Brokers assemble this, and more, into profiles that outlive any account one can easily delete, let alone see. Those profiles are what train, feed and breed commercial AI systems.
This system can make some feel powerless. But we're gonna let you in on something many may not learn…
A right to privacy comes with a right to encrypted and ephemeral technologies
Consumers and small businesses have every right to pick tools, platforms, hardware, and services that strengthen their privacy posture and minimize the exposure of their behavioral and operational data. The tools below are legal, commercially available, and mostly free. They just don't ship by default.
But before that, consider an ordinaryIDAHO (a default consumer).
The ordinaryIDAHO 👁️
Nothing dramatic has to happen for a day of your life to be collected, packaged and sold several times over. A plausible one:
| You wake up | Your phone has been talking to cell towers all night, so your carrier holds a continuous record of roughly where you slept. Carriers have historically sold location data to aggregators, who resold it onward. |
| You check the weather | The app carries advertising SDKs. Precise location leaves the device and reaches data brokers, who are not the company whose icon you tapped. |
| You read the news | Loading the page triggers a real-time auction. A bid request describing you and what you are reading is broadcast to hundreds of companies in the time it takes the page to paint. Every one of them receives it; one of them pays. |
| You drive to work | Automated licence plate readers log your plate, the time and the place into databases that are searchable later, and that neither you nor your local government necessarily controls. |
| You buy lunch | The card gives the merchant and its processor your real payment identity. Email or phone at checkout links today's purchase to every other list you are on. |
| You watch TV | Smart televisions sample what is on screen and match it against a fingerprint library, so what you watched joins the same profile as where you drove and what you read. |
No single step in that day is alarming. The aggregate is a dossier you cannot read, cannot correct, and cannot delete. It is assembled by companies you have no relationship with, and sold to anyone who will pay. That is the business being described, and it is a business, not an accident.
The privateIDAHO 🌲😶🌫️
Ordered from easiest to hardest to put in place. A privateIDAHO can use all twelve, and more. Open any row for the detail.
Start here (minutes each)
-
Advanced Data Protection end-to-end encryption for iCloud backups, one toggle
End-to-end encryption for most iCloud backups, off by default. One toggle.
Availability varies by jurisdiction: Apple withdrew it for new users in the United Kingdom in February 2025 following a government demand for access, and is still contesting that demand in court.
-
brave.com ad and tracker blocking, plus fingerprint randomisation
Free Chromium-based browser with ad and tracker blocking that extends to YouTube, plus randomised fingerprinting so you are harder to re-identify between sites.
-
signal.org encrypted messaging that collects almost no metadata
Free encrypted messaging with minimal metadata collection. Encrypting the message is the easy part; collecting nothing about who spoke to whom, and when, is the part almost nobody else does.
-
dontgetflocked.com a map of known plate readers, so you can see them coming
Flockhopper: a map and navigation app cataloguing known automated licence plate reader locations, so the Tuesday above is at least legible to you.
Worth an afternoon (mostly paid, mostly set-and-forget)
-
mullvad.net no-logging VPN with no account, takes cash
Best-in-class no-logging VPN, based in Sweden, with no account to tie to you. Accepts cash and Monero.
-
privacy.com virtual cards, so merchants never get your real one
Virtual credit cards, so a merchant never receives your real payment identity. Pairs well with a VoIP number and an email alias: three fields at checkout, none of them you.
-
mysudo.com numbers, aliases and cards: a whole second identity
VoIP numbers, email aliases and virtual cards in one place: a complete second identity for the places that demand one and have not earned your real one.
-
proton.me Swiss encrypted email, drive, VPN and password manager
Swiss-based encrypted email with aliasing, plus drive, docs, VPN, password manager and an AI assistant. Founded by scientists at CERN.
Bigger commitments (new hardware, new habits, or both)
-
cape.co a carrier that rotates the identifier your phone broadcasts
A mobile carrier (an MVNO) with deliberately limited Know Your Customer requirements, encrypted voicemail, two SMS aliases, minimal call log retention, and what Cape describes as the first commercial IMSI rotation. That rotates the identifier your phone shows the network, which is the thing the first line of that Tuesday depends on.
-
joindeleteme.com data broker deletion, filed and refiled for you
Data broker deletion, filed and refiled on your behalf. Removal is not permanent, because brokers re-acquire. That is why this is a subscription rather than an errand. incogni.com is worth comparing.
-
grapheneos.org hardened, de-Googled Android
A hardened, de-Googled Android that, ironically, requires a Google Pixel to run on. Pairs naturally with Cape.
-
protectli.com your own firewall, router and VPN server
A firewall appliance, router and VPN server in one: total control and observation of what leaves your home or office network. Highly customisable and genuinely technical.
Pairs well with Pi-hole, which wants a separate machine such as a Raspberry Pi.
Also on the table
| Encrypted DNS | Every site you visit starts with a lookup, and by default your provider sees all of them in plain text. Encrypting those lookups is among the cheapest improvements available. We run galenaDNS for exactly this, free, and will just as happily set you up on someone else's resolver. |
| Wi-Fi sensing opt-outs | Wi-Fi hardware can detect movement through walls as a side effect of how radio works. Where equipment offers an opt-out, it is usually on by default and worth finding. |
| Home and office networks | Segmenting guest, work and smart-device traffic, and being able to see what each device phones home, is most of network security at this scale. |
Your Own privateIDAHO* 🌲😶🌫️
Your Own privateIDAHO is our privacy consulting service: a group seminar or a 1:1 white-glove engagement that turns any item in the list above into something you actually run.
* Individual Defense Against Hostile Observation. Named, like galenaDNS, for the one and only free, private and great Gem State (esto perpetua 💎).
| privateIDAHO Seminars | An evening crash course on digital privacy hygiene. We cover what each of these tools does, what they cost, what they defeat, and how they are implemented. Useful for teams trying to reduce the operational data they shed, or a collective interested in group rates. |
| privateIDAHO Implementations | Hands-on setup and ongoing advisory for consumers and small businesses: picking the subset that fits how you actually work, standing it up, and staying reachable when something needs changing. |
Rates depend on scope and headcount. Get in touch and we will quote it.
No affiliate links, no referral fees. Every link on this page is a plain link. SWTHRC has no commercial relationship with any company listed, takes no payment for inclusion, and recommends these because we run them.
Worth saying plainly: these are consumer products, not anonymity, and this page is not legal advice. They reduce how much of your behaviour is collected and sold by default. They do not defeat a targeted investigation, and nothing here is a reason to break the law or to assume you cannot be identified.
Availability and legality vary by country: Advanced Data Protection is the example above, and it will not be the last. If you operate outside the United States, check before you rely on any of it.
Contact
| privateIDAHO | encrypt.me@swthrc.com |