Context: my gf mentioned getting a vpn for privacy, and I tried to explain that it "does" help, but it's more like type of windows on a house. It certainly can be part of the package, but it's no where near the foundation.
So i tried to explain the best that i could That if she was worried about online privacy the first step wasn't to mask traffic, but to not submit personal data to anything online like FB, not use Google services that package everything on you together to sell to advertisers, and to limit phone apps to essentials.
But I'm curious on what other steps you guys would consider the "foundation" of online privacy that should be prioritized before a vpn. Any thoughts? Or am I way off base?
Note: this is in context of vpn for privacy. Using vpn to avoid Geo blocking and censorship I see as incredibly valid for those that need it.
I think you and your girlfriend should read about "threat modeling". You need to figure out what you and her are trying to keep private and from whom. Without knowing that, its impossible to say if a VPN is a good solution.
For example if she is trying to hide her web traffic from her ISP then a VPN is a great solution, if she is trying to be annoymous on the web then a VPN won't do much as you are still easily fingerprintable amongst other things.
People all to often act like privacy is some sort of list of sub items that you can check off like completing a quest in a MMO.
Each individual's privacy goals are different, privacy is not a one size fits all problem or solution. Your girlfriends needs may be drastically different then your own.
Yep. For example, if your ISP is in the advertising business, I would definitely use a VPN, even after opting out w/ the ISP/cellular provider. IMO a lot of times when you opt out, it doesn't mean they stop collecting information, it means they paused using that information for ad targeting.