Skip to main content
Pipeline — Help Shape It

WanderPhone

Privacy smartphone — Google collects 20x more data from Android than Apple from iOS, Pixel hardware with GrapheneOS is the only audited privacy-hardened Android, geofence warrants served to Google hit 11,000+ devices in one case.

Safety & Privacy
ReplacesStock Android (Google 20x data collection) / iOS (iCloud breaks E2E, Apple government compliance)
Open-source baseGrapheneOS

A 2018 study found that a stationary Android phone with no SIM sends location data to Google 340 times in 24 hours. Google collects approximately 20x more data from Android users than Apple collects from iOS users on equivalent usage. Geofence warrants — where law enforcement requests data on every device in a geographic area — have hit single cases affecting 11,000+ devices. Apple iPhones are significantly better than stock Android for privacy, but iCloud backup breaks E2E encryption and Apple complies with government requests. GrapheneOS on Pixel hardware is the only configuration that has undergone independent security audits, removes Google services by default, and provides hardware-level microphone/camera indicators (Pixel 6+). WanderPhone is not new hardware — it is a pre-configured GrapheneOS Pixel with WanderCore privacy layer, the WanderVerse app suite, and threat-model-calibrated hardening. The goal is making the technical privacy stack accessible to people who need it, not just people who can configure it themselves.

  • GrapheneOS base: the only audited privacy-hardened Android — not a fork, actively maintained
  • Google removed: no Play Services data collection, no 340 daily location pings to Google
  • Geofence warrant protection: no Google account means no data to serve under geofence warrant
  • Hardware microphone/camera indicators: Pixel 6+ hardware-level — not software that can be bypassed
  • App sandbox isolation: each app in its own sandbox, no cross-app data access
  • WanderCore pre-configured: Pi-hole DNS, WireGuard VPN, hardened defaults out of the box
  • WanderVerse app suite installed: all local WanderVerse tools pre-configured and ready
  • Threat model calibration: high-risk (DV survivor, activist, immigrant) vs. general privacy configurations
  • Not new hardware: configure your existing Pixel, or WanderPhone ships pre-configured on Pixel 8+
  • Apple comparison: better privacy than stock Android, honest about trade-offs vs. iOS
Hand-assembled

Built by supported employment workers — people with intellectual disabilities, autism, and physical disabilities — through WWP's fulfillment program. Every product ships with a Built By card. Competitive wage, never 14(c) subminimum.

Repair & refurb

Send it back. Prepaid label. Component-level repair, module upgrades, firmware updates. 7-year spare parts guarantee. Donate on return — refurbished hardware goes to shelter and community partners. GPL firmware: the device works even if WanderVerse shuts down.

No hardware subscription — ever

BMW charged $18/mo for heated seats already in your car. GM locked remote start. Eero charges for VPN on hardware that could run it free. We don't do that. You bought it, you own it — every feature works forever, no subscription required. WanderAssist ($9/mo optional) is a convenience layer, never a gate. Safety features are never paywalled.

Pro & Lux tiers — coming

Every WanderVerse hardware product will offer Pro and Lux finish tiers — premium materials and handcrafted finishes by WanderVerse Artisans: supported employment workers with artistic skills. Each Lux unit ships with a Finished By card. Lux revenue cross-subsidizes nonprofit pricing.

← All products WanderVerse home Founding Member Investor Waitlist