@rporter @eff that's a good start, as long as #CloudFlare is not the VPN provider & out of the DoH loop. OTOH, the VPN just moves the risk to the VPN svc, so #Orbot/Tor is better. But in the context of the OP, neither will help if the app xmits your IMEI w/gps coords.

@resist1984 @eff For the average user, total privacy is impractical. My focus with my clients is to help them avoid accidentally giving data to the major players, such as Google or Facebook.

@rporter @eff The tech giants (#MACFANG) is not where the gov gets the location tracking data. Tech giants profit more by keeping that secret & abusing it themselves. The location tracking data the gov buys comes from a hole-in-the-wall broker. I forgot the name of the company but there are many apps in Playstore that collect the data.

@eff @rporter You won't likely be able to get your clients to avoid #Google Playstore and use #Fdroid, but luckily that hole-in-the-wall data broker has an opt-out option.

@rporter @eff I wish I could recall the name of that company and the opt-out procedure. In any case, you could best serve your clients by opting out on their behalf.