There are different levels of secure. At level 1 is the normal stock Android you buy on the stores. Securer option are no-brand cheap chinese phones. Awful quality for sure, but they don't afford to bother themselves in locking the device too much nor incorporating deviations from the original AOSP. Google services and others track your phone 24/7 anyways. Best thing you can is custom encrypt some folders, gives some privacy. At level 2 you've got the modified Android distros . Claude and Codex do a good work flashing these phones for your with a distro, my own choice typically falls on LineageOS. Drawback is that banking apps stop working but life without google services is a boost in privacy right there. Zapstore is most needed at this level, given that Google Play is gone for most of the scenarios. Extra points when you go with Pinephone or similar. At level 3 you skip installing Android and go for PostMarketOS. There you can trust the software won't rat on you and can still launch most Android apps in addition to anything that runs on a normal desktop. Works great nowadays but there is a drawback: battery life tends to be less. Going deeper outside google you need to ditch Android in favour of ESP32 to skip spyware entirely. At this point only the network can spy on you since the device is still depending on IP addresses. Last frontier for secure is your ESP32 ditching the internet completly, using radio packets. Send and receive data from anywhere in the globe using some of the freely available satellites.