HTTPS killed the classic public-wifi password-sniffing threat. The real dangers now are evil-twin networks, fake login portals, and metadata. Proportionate defenses that work.

Permissions control what an app can access, not what it sends. Apps hide dozens of trackers that phone home over the network. How egress control cuts the line.

A court forced OpenAI to keep deleted ChatGPT chats and hand over 20 million of them. You tell AI your most candid thoughts, all logged on a server. The fix is on-device AI.

Deleting a file does not erase it, and you cannot reliably overwrite flash. What actually wipes a modern phone is destroying the encryption key, if the copies are gone too.

Every phone photo can carry GPS coordinates in its EXIF metadata. Here is how geotags leak your address, why AI can geolocate photos with no metadata, and how to shut it down.

Your phone guards the camera and mic, but the accelerometer, gyroscope, and light sensor are zero-permission, readable silently. They can infer your PIN and fingerprint you.

Powering off drops your phone into the BFU state that even Cellebrite cannot crack, so it protects your data. But it is not invisibility: Find My still works when off.

Hundreds of companies sell your address and phone. California’s DROP now deletes you from all registered brokers in one request. Here is the opt-out method for every state.