> Ultimately, those are the same thing. There is no privacy if you can't inspect it and verify that it's upholding its promises.

If you want to go down that road the software you need to inspect includes all the software with access to your data.

In android's case this includes all sorts of proprietary code running in google's infrastructure that you'll never see. If you enable all the features of a modern android phone the amount of data google tracks about you is staggering. All that data is available to any government that asks for it directly from google. Google is actively incentivised to data mine, use and sell my data. I don't think they sell it - but thats the direction the incentive arrows point.

If you want to roll your own, or use one of the non-google android forks then I respect that decision from a privacy standpoint. (Although my security engineer voice is much more nervous.) But stock android is a privacy disaster (at least if you worry about google / the US govt). The ability to root your device is nice, but in google's ecosystem the computers that really matter are the servers.