Gmail - > tuta mail

Also you use way too much proton. Don’t put all your eggs in one basket

As others have said, remove all proton stuff that you can. You are just replacing one centralized service with another. Google started out good too and look where we are now. Never put too many eggs in one basket.

Perhaps this one:

Proton Mail -> Tuta Mail

Why? I would be careful with Proton Mail b/c it presumably advocates the Swiss surveillance and security law, which allows to keep information for a longer period of time.

BTW, you can add:

GitHub -> Codeberg (or Forgejo)

Arent you using too much proton

As others have pointed out, having so many Proton might be an issue. However, that line of thought only works if you’re really concerned about having a single point of failure. Most people value convenience much more than that.

The way I see it, this setup is somewhat noob-friendly, but relying heavily on Proton makes it a lot more convenient for many people. Using a greater variety of providers would make sense, but you can’t expect everyone to be ready for a hassle like that. People seem to expect you to be a hard-core privacy warrior who is willing to make significant sacrifices for philosophical reasons.

Most people aren’t like that. Just switching to DDG is hard enough for them, but at least it’s a step in the right direction.

If you take only 1/10th of this diagram, you get the simplified newbie version. Take all of it, and it’s for a person who is clearly interested in security and privacy. Modify a few things here and there, and you get a version for a serious security enthusiast. Different versions for different audiences.

Maps is the hardest thing to replace. I like comaps but it’s hard to find any businesses on it. They should probably start scrapping google maps because there no way to get ahead at this point.

I prefer Comaps over OSMand.

Proton Pass. For privacy, either self host or use offline password managers.

Obsidian is closed source or not fully open source iirc. Try Notesnook if you need sync.

In my honest opinion? Nothing. There is nothing worth changing here, all the other advice is just different kinds of extreme.

based on your selection and the fact that you asked this question is good a indicator that any other alternative people would suggest won’t do you that much benefit while carrying a much higher chance of being highly inconvenient.

If I’m being very picky and perfectionist, Obsidian.

It’s closed source, and there are open-source alternatives, be it Trilium, Zettlr or whatever strikes your fancy

Mullvad Browser, SearX or StartPage search, SimpleX or Briar messenger, Fossify Suite(Files, Camera, Gallery, Calendar, Notes, Keyboard, etc), Filen Cloud, Aegis 2FA, SimpleLogin or Addy as mask to email account, FlorisBoard keyboard

First off: you’ve come a long way. Great setup, keep it up!

As others have said, I’d reduce your reliance on Proton. I’d particularly ditch their password manager in favour of something like KeepassXC and combine it with Syncthing (which you’re already using) in order to keep your passwords out of the cloud, but synced between your devices. Always think in terms of blast radius: if an attacker gets access to your Proton account (either because you fuck up or they do), they will have access to anything that’s in there. Having your e-mail + pw manager there increases blast radius dramatically and allows not only for access to, but full takeover of your accounts in case of a breach.

I don’t trust proton.

Get a 5$/ month Nextcloud instance on Hertzner or selfhost it. You’ll get 1 tb drive, calendar, notes, office suite, sync with phone, and much much more.

You got great choices, actually. I’d only recommend to be as little dependent on multiple fronts on one company. So I’d change a few of Proton to something else. As long as Proton doesn’t replace their CEO with an explicitly antifascist one, I don’t know if they re a good spot.

Depending on how private communications must be, Threema might be better than Signal.

If you don’t need to synchronise with others and your threat model is not physical attacks/theft, then agendas can be just on paper. Same for the calendar.

As for distro…

Mint is great (and honestly what I’d rec for people brand new to Linux). If you want to harden privacy/security more though, the following Linux distros might be better:

• Fedora (any of them). It’s an international upstream distro from Red Hat (American company, parent company is IBM). In other words, it’s developed by the community, which is gathered in the Fedora Project. Their headquarters is in NC, USA. Red Hat then uses the community distro to make their own distro, and in return, finances Fedora. Linus Torvalds, the creator of Linux, uses it. If he trusts it, I trust it.
• OpenSUSE Tumbleweed -, developed by the OpenSUSE community, backed by OpenSUSE from Germany. Pretty good all-arounder.
• Arch Linux, developed internationally, but most devs are spread across Europe. Has an extensive wiki (that also is good for other distros), though it’s not exactly “plug and play” and I’d rec it only if you know what you’re doing.
• Debian is another option if privacy is less of a concern for you, than it being FOSS. It’s one of the most FOSS distros out there, and also highly independent and international.

I assume you want to use your distro as daily driver, and that your threat model isn’t too severe. So the above ones should suffice.

If the threat model calls for it, or you’re willing to sacrifice some usability for slightly more security, you could try QubesOS (arguably one of the most secure distros since it sandboxes everything as if they were a separate computer). Tails is another alternative, that’s on a USB and forgets itself after usage.

For search engines…

… go for Qwant (French) or Ecosia (German). Both are European-owned and are busy constructing their own indexes (currently they still use Bing and Google). There’s Mojeek (UK-based) which is independent.

I don’t know how to block specific sites from popping up on them though, since I notice a certain trillionnaire’s personal ““wiki”” pops up a LOT. Probably he’s cheating and search bumping to spread his desinformation. It should be blocked.

Presearch also exists, which is decentralised and uses its own indexes. If you want OSS, there’s SearXNG and YaCy which have metasearch options. Be careful in which instance you pick, though.