1. Introduction

Here, I am summarizing the results of electronic devices, esp. smartphones, laptops, desktops, and related operating systems which are privacy-protecting and eco-friendly (eg, repairable).

Desirable features:

• Hardware:
  • eco-socially fair supply chain
  • robust (“military-grade”)
  • repairable
  • hardware kill switches for audio, video, internet
• Software
  • open-source
  • private (does not leak data to corporations)
• Business
  • accepts cryptocurrencies
  • offers interdiction services
  • located in states which protect civil liberties

2. Mobile Phones & Operating Systems

2.1 Murena Phones (FR) and /e/ OS operating system

• Murena offers mobile phones and tables  on new and refurbished devices (collaborating with FairPhone and ShiftPhone as hardward manufacturers).
• The devices run /e/ OS which is an Open-Source Operating System which is based on ANDROID, but without Google Mobile Services as proprietary and privacy-breaching software.
• Note: One can also buy a refurbished phone and install the /e/ OS operating system oneself  (“flash the ROM”).

My take: I have been using /e/ OS on refurbished Samsung phone for several years and I am happy with the user experience. Installing /e/ OS can be technically challenging depending on the used phone model, so less technical users may prefer buying pre-installed phones from the MURENA store.

Links:

[1] Murena Shop: https://murena.com
[2] Murena Cloud: https://murena.io
[3] /e/ OS: https://e.foundation

2.2 FairPhone (NL) and Google Android or /e/ OS

FAIRPHONE  [1] is a Dutch electronics manufacturer that designs and produces smartphones and headphones. It aims to minimise the ethical and environmental impact of its devices by using recycled, fairtrade and conflict-free materials, maintaining fair labor conditions throughout its workforce and suppliers, and enabling users to easily repair their devices through modular design and by providing replacement parts. As of June 2025, the company’s most recent smartphone is the Fairphone 6, a highly modular and easily repairable device for which it plans to provide seven years of Android OS updates and eight years of security patches, as well as a five-year warranty. Fairphone has been dubbed “the most ethical smartphone in the world”, scoring 98 out of 100 possible points by the British magazine Ethical Consumer. [2]

FAIRPHONE is cooperating with MURENA to provide their phones with a de-Google-ed, privacy-protecting Android operating system (see 2.1).

My take: Recommended if you want to have a new, but eco-friendly phone optionally with /e/ OS.

Links:
[1] https://www.fairphone.com
[2] https://en.wikipedia.org/wiki/Fairphone

2.3 Shiftphones (DE) and ShiftOS

Shiftphone [1] is a modular, easy-to-repair smartphone brand created by the company SHIFT in Germany. The company emphasizes fair trade and ecology, similar to Fairphone. Instead of tantalum capacitors made from coltan, ceramic capacitors are used for their manufacturing. So far, eleven model series have been released. The most recent release was the SHIFT6mq (successor of the Shift6m) in June 2020. The upcoming device will be the SHIFTphone 8, scheduled for release in 2024. [2]

Shiftphones are installed with one the the following operating systems:

• ShiftOS‑G: includes Google services and Play Store.

• ShiftOS‑L: lighter version without Google services (more privacy‑friendly).

My take: Recommended if you want to have a new, but eco-friendly phone optionally with /e/ OS.

Links:
[1] https://www.shift.eco
[2] https://en.wikipedia.org/wiki/Shiftphone

2.4 PinePhone & Manjaro Linux (and others)

The PinePhone is a smartphone developed by Hong Kong–based computer manufacturer Pine64, designed to provide users with full control over the device. This is achieved through the use of mainline Linux-based mobile operating systems, assembly of the phone using screws, and facilitating simplified disassembly for repairs and upgrades. The 2G-4GLTE modem, GPS, Wi-Fi, Bluetooth and both cameras can be physically switched off. The PinePhone currently ships with the Manjaro Linux operating system using the Plasma Mobile graphic interface, although previously other distributions were shipped, which can still be installed by users. [1]

Manjaro ARM with Plasma Mobileis the primary OS for the PinePhone. Pine64 officially selected it as the default pre-installed distribution starting in 2021 for standard editions, replacing earlier community variants. In addition, Manjaro (Phosh & Lomiri), postmarketOS, Debian (Mobian), Arch Linux (ARM) are supported.

• [Europe] PinePhone Beta Edition (with Convergence Package Links):
  • hardware privacy switches allow you to physically disconnect the device’s: cameras, microphone, Bluetooth and WiFi as well as the LTE modem.
  • core functionality is now well supported by nearly all mobile Linux operating systems
  • Operating System:
    • The optional pre-installed operational systems are: Manjaro, postmarketOS and Mobian.
    • runs a mainline-based Linux and supports a wide array of operating systems (see https://wiki.pine64.org/wiki/PinePhone_Software_Releases)
    • runs Android apps via a compatibility layer, but in all likelihood your banking or travel apps will not function fully or at all
• [Europe] PinePhone Pro (Explorer Edition):
  • PinePhone Pro is the fastest mainline-based Linux smartphone on the market
  • The Explorer Edition has been created specifically made for developers and early adopters.
  • Optional pre-installed operational systems:
    • Manjaro, postmarketOS and Mobian are all in early stages of development.
    • runs Android apps via a compatibility layer, but in all likelihood your banking or travel apps will not function fully or at all.
• Summary of Differences:
  • The PinePhone Beta Edition targets developers with its convergence dock for phone-to-desktop use, preloaded Manjaro Plasma Mobile (beta software), and is essentially a refined original PinePhone for testing.
  • The PinePhone Pro Explorer Edition focuses on raw performance upgrades like the RK3399S SoC for smoother Linux mobile UIs (e.g., Phosh, Plasma), better cameras, and mainline kernel readiness, but lacks the bundled dock.
  • Both support multiple OSes and privacy switches, but Pro handles production workloads better today.

Links:
[¹] https://en.wikipedia.org/wiki/PinePhone
[2] https://pine64.org

2.5 Librem (USA) and PureOS

Librem [1] is a line of computers manufactured by Purism, SPC featuring free (libre) software. The laptop line is designed to protect privacy and freedom by providing no non-free (proprietary) software in the operating system or kernel, avoiding the Intel Active Management Technology,[6] and gradually freeing and securing firmware. Librem laptops feature hardware kill switches for the microphone, webcam, Bluetooth and Wi-Fi.[2]

Products:

• The Librem 5 is a phone built on PureOS, a fully free, ethical and open-source operating system that is not based on Android or iOS.
• The Liberty Phone exists alongside our regular Librem 5 and based on the same privacy-protecting principles of Purism products including PureOS & software. The Liberty Phone adds a highly controlled secure supply chai since all the electronics of the Liberty Phone is made in Purism’s USA facility, and the entire phone is assembled in the USA, using the same manufacturing process we used for the Librem 5. 

My take: not tried yet, users in web forums previously complained about weak battery life and WIFI connection, not sure how common issues were and whether they have been resolved.

Links:

[1] https://puri.sm
[2] https://en.wikipedia.org/wiki/Librem

2.6 BYOD (Google Pixel) and GrapheneOS

GrapheneOS [1] is a free and open-source, privacy and security focused, Android-based operating system for Google Pixel smartphones, tablets and foldable devices. GrapheneOS is built on the Android Open Source Project. It focuses on researching and improving the privacy and security of Android. GrapheneOS is developed by the GrapheneOS Foundation, a Canadian nonprofit corporation. [2]

GrapheneOS is distributed based on the principle of Bring-Your-Own-Device  (BYOD), which is limited to Google Pixel Devices, which means that users install GrapheneOS themselves. However, there are selected vendors which sell pre-installed GrapheneOS Devices [3], whose trustworthyness has not been assessed.

My own take: Users in web forums stated that the installation of GrapheneOS is simple, so it seems cheaper and more secure to buy your own (refurbished) Google Pixel device and install it yourself.

My take: not tried yet, more privacy-protection than /e/ OS, comes without Google Mobile Services or microG replacement, but can run Google Mobile Services in Sandbox.

Links:
[¹] https://grapheneos.org
[2] https://en.wikipedia.org/wiki/GrapheneOS
[2] https://liberateyourtech.com/product/buy-grapheneos-phone-pixel-new/

2.7 Jolla Phones & SailFish OS

Jolla phones are privacy-focused smartphones from Finnish company Jolla that ship with Sailfish OS, a Linux-based mobile platform positioned as a European alternative to Android and iOS and influenced by the legacy of Nokia’s MeeGo efforts. Sailfish OS combines an open Linux core and Qt-based interface with a distinctive swipe- and gesture-driven UI, strong multitasking, and the ability to run both native Sailfish apps and many Android applications via a compatibility layer. Modern Jolla devices such as the community-oriented C2 and newer 5G models emphasize user control, long-term software support, and features like dual-SIM, VoLTE/5G connectivity, and user-replaceable batteries, catering to enthusiasts and organizations that value independence from the dominant mobile ecosystems

Links:

[1] https://commerce.jolla.com/products/jolla-phone-preorder

]2] https://forum.sailfishos.org/t/sailfish-os-for-fairphones-devices/21516

3. Laptop/Desktops & Operating Systems

The main privacy threat for laptops/desktops/servers are the Intel Management Engine (IME) and AMD Platform Security Processor (PSP) Backdoors, of which the AMD PSP firmware seems to be far less vulnerable than Intel’s IME because it lacks network access capabilities [1].

3.1 System76 (USA) and Pop! OS Linux

SYSTEM76 [1] is an American computer manufacturer based in Denver, Colorado, that sells notebook computers, desktop computers, and servers. The company utilizes free and open-source software, and offers a choice of Ubuntu or their own Ubuntu-based Linux distribution Pop!_OS as preinstalled operating systems.[2]

Important principles:

• Hardware:
  • Quality and Durability
  • Hardware optimized for compatibility and performance with Linux (Pop! OS or Ubuntu) incl. firmware, kernel, drivers
  • Hardware can be serviced, repaired or replaced by user
• Software:
  • Open Firmware (Coreboot) Support (selected models)
  • Privacy and Security Features
• Business:
  • Contributions to Open Source and Open Hardware

My take: major manufacturer of Linux laptops, develops POP! OS linux, well integrated with graphics cards for AI computing, chokes on NVIDIA drivers after kernel update (kernel panic!), which can be fixed with a couple of terminal commands after booting to last kernel.

Links:

[1] https://system76.com
[2] https://en.wikipedia.org/wiki/System76

3.2 Librem (USA) and PureOS Linux

Librem [1] is a line of computers manufactured by Purism, SPC featuring free (libre) software. The laptop line is designed to protect privacy and freedom by providing no non-free (proprietary) software in the operating system or kernel, avoiding the Intel Active Management Technology,[6] and gradually freeing and securing firmware. Librem laptops feature hardware kill switches for the microphone, webcam, Bluetooth and Wi-Fi.[2]

Important Features:

• Devices are pre-installed with PureOS Linux as  OS and CoreBoot as BIOS with deactivated Intel Management Engine (IME)

Products:

• Librem 11 — Linux Tablet / 2‑in‑1 Device
• Librem 14 — Mainline Secure Laptop (Note: Out of Stock, Librem 14v2 to be released)
• Librem Mini — Small Desktop / Home Server

My take: not tried yet, users in web forums previously complained about weak battery life and WIFI connection, not sure how common issues were and whether they have been resolved.

Links:

[1] https://puri.sm
[2] https://en.wikipedia.org/wiki/Librem

3.2 FrameWork (USA) & various Linux Distributions

FRAMEWORK COMPUTER [1] is an American personal computer manufacturer. The company positions itself as a proponent of the right-to-repair movement, and their laptops are designed to be easy to disassemble, with replaceable parts. [2]

Products:

• Framework Laptop 12 — Ultra‑portable & Convertible
• Framework Laptop 13 — All‑Around Everyday Modular Laptop
• Framework Laptop 16 — Performance & Expandability Focused

My take: not tried yet, just eco-friendly, less privacy-protecting

Links:
[1] https://frame.work
[2] https://en.wikipedia.org/wiki/Framework_Computer

3.3 StarLabs (UK) & various Linux Distributions

StarLabs Systems (often just called Star Labs) is a small UK‑based computer manufacturer that focuses on Linux‑friendly, open firmware laptops.

Important Features:

• Their computers run Coreboot, an open‑source firmware stack.

• This firmware supports Secure Boot, BIOS Lock, TPM 2.0, Measured Boot, and Total Memory Encryption.

• The Intel Management Engine is disabled.

Main Products:

• StarLite — Entry‑Level, Lightweight Laptop
• StarBook — Mid‑Range Linux Laptop
• StarBook Horizon — Premium Mid‑Tier with Enhanced Display
• StarFighter — High‑Performance Large Laptop
• Byte — Compact Mini Desktop

My take: not tried yet

Links:
[1] https://starlabs.systems

3.4 Pine Laptop  & Manjaro with KDE Plasma (alt BSD OS)

The Pinebook Pro is an Arm laptop supporting multiple mainline-Linux based operating systems. It is meant to deliver solid day-to-day Linux or *BSD experience and to be a compelling alternative to mid-ranged Chromebooks that people convert into Linux laptops.

In contrast to most mid-ranged Chromebooks however, the Pinebook Pro comes with an IPS 1080p 14″ LCD panel, a premium magnesium alloy shell, 64GB of eMMC storage, a 10,000 mAh capacity battery and the modularity / hackability that only an open source project can deliver – such as the unpopulated PCIe m.2 NVMe slot (an optional feature which requires an optional adapter). The USB-C port on the Pinebook Pro, apart from being able to transmit data and charge the unit, is also capable of digital video output up-to 4K at 60hz. It also features privacy switches for the camera, Bluetooth and WiFi as well as the microphones.

Product:  14″ PINEBOOK Pro LINUX LAPTOP

Links:

[1] https://pine64.org
[2] https://pine64eu.com
[3] https://pine64eu.com/product-category/devices/laptops/

3.5 Raptor Computing Systems (USA) & various Linux Distributions

RAPTOR COMPUTINGS SYSTEMS [1] specializes on the POWER9 CPU architecture by IBM, which runs on fully open-source, privacy-protecting, auditable, modifiable (boot) firmware which gives the users complete control over the system security. It DOES NOT require proprietary software like Intel’s Management Engine (IME) or AMD’s Platform (PSP), which may be used as backdoors.

Main Products:

• Blackbird — Smaller, Cost-Aware, Desktop / Developer
• Talos II — Workstation / Server Class

My take: POWER9 architecture is the highest-performing, privacy protecting CPU architecture. Niche, but class.

Links:

[1] https://www.raptorcs.com
[2] https://www.raptorengineering.com

3.6 Vikings (DE) & various Linux Distributions

We sell and service a small & carefully curated list of freedom-respecting computers that are made to work well with Linux and free/libre/open source (FLOSS) software. Our devices respect your privacy, and right to repair. Our refubished Thinkpads come with Intel ME neutralised & have over a decade of FLOSS reverse-engineering and documentation effort.

Links:
[¹] https://vikings.net

General References

[G1] https://www.linkedin.com/posts/padmanabhan-v-r-07aaa117_intel-me-and-amd-psp-backdoors-intels-management-activity-7358169388337762304-BIq6