These are some practices which worked for me, You can adjust them to match your preferences. Feel free to add your own in the comments
- If you are forced to use something that is privacy invasive, Make it isolated from your actual profile. (Ex- Using a 2nd Browser profile, Using an alias to signup)
- Always use the services that you use from their official clients. Don't blindly trust 3rd party clients just because they claim that they are "more private", Do some research before using it.
- Add a random word at the end of your password and have the password on your password manager without the word. You can type and add the word out by yourself when filling it in. (Might be annoying but pretty life saving if your password manager were to ever get breached)
- Don't mix up your work life with your personal life. Consider getting a second phone just for work purposes or you could use a second profile for work purposes if your phone has the ability to create multiple user profiles.
- Keep a habit of clearing the browser data once in a while. (You can make your browser automatically clear the browser data when closing but it can be kinda annoying when you have to log back into websites everytime)
- Strip away the metadata of your photos and documents when sharing them.
- Check connected apps/services regularly and revoke unused ones. (on Discord, GitHub, Matrix and etc.)
- Audit app permissions regularly (Some apps adds in new permissions or re-enables permissions over updates)
I tried it out on my laptop that's running Fedora and so far it's great. it's a shame that the development of it has ended.
I'm thinking of using Outertune when i get myself a pixel and install GrapheneOS on it.