I get where you’re coming from. I used to be an Apple girl.

Apple does privacy well by default, but it’s a model that assumes Apple itself is trusted.

You get strong defaults, but only if you’re comfortable with Apple sitting in the middle.

iOS is closed-source end-to-end, the baseband is opaque, App Store control is absolute, and a lot of data handled by Apple services is still accessible to Apple.

We’ve already seen how this plays out—Apple admitted that contractors were listening to real Siri recordings, including private conversations, and had to backtrack after public backlash. That’s the trust model in practice.

Apple also uses user data to advertise—just differently than Google. Google’s model is third-party and ecosystem-wide; Apple’s is first-party and vertically integrated. Different mechanics, same outcome: your behavior is still being used to influence and monetize you, just internally.

GrapheneOS is built around a different assumption: minimize trust in any single party, harden the OS, reduce attack surface, and give the user explicit control over isolation, permissions, and data flow.

Apple offers strong baseline privacy within boundaries Apple defines. GrapheneOS is for people whose threat model includes the platform vendor itself—not because Apple is uniquely bad, but because trust minimization is the goal.