Be careful how you acquire the phone. Every phone has unique identifiers (IMEI). Even if it isn’t activated with service it is still talking to cell towers and can be tracked. If you used a card/bank account/most crypto to buy the phone, you’re already compromised. And, again, this is still true even if you never activated a service plan.