GrapheneOS, Signal, Vanadium, Mullvad VPN, extremely strict permissions. I don't do much with my phone, but I still need to know I'm in control of my privacy.