Privacy-Focused Tools We Recommend
Posted: August 10, 2026 · 3 min read
Building a privacy-first toolkit
Privacy is not a single product. It is a stack. Using one encrypted tool while everything else leaks data is like locking your front door and leaving the windows open. If you are a contractor or consultant handling sensitive client information, your entire toolkit should respect your data.
Here are the tools we use and recommend across categories. Each one prioritizes privacy through either end-to-end encryption, local-first architecture, or both.
The toolkit
Email: ProtonMail. End-to-end encrypted email based in Switzerland. Zero-access encryption means Proton cannot read your emails. The free tier is generous enough for a personal or side-project inbox, and the paid plans add custom domains and more storage. For contractors, it is an ideal inbox for communications that should not live on a provider that scans content for advertising.
Messaging: Signal. The gold standard for encrypted messaging. Open-source protocol, no ads, no tracking, minimal metadata retention. If you need to discuss client matters outside of their corporate Slack, Signal is where that conversation should happen. Group chats, voice calls, and video calls are all end-to-end encrypted.
Notes: Obsidian. A local-first note-taking app that stores everything as plain Markdown files on your device. No cloud account required. Your notes are just files in a folder, readable by any text editor, owned entirely by you. The optional sync service uses end-to-end encryption, but you can also sync via any method you trust (or skip syncing entirely). For consultants keeping project notes across multiple clients, the vault-per-client model works exceptionally well.
File storage: Cryptomator. An open-source tool that creates encrypted vaults on top of any cloud storage provider. Drop a Cryptomator vault in your Dropbox or Google Drive and the files are encrypted before they leave your machine. The cloud provider sees only encrypted blobs. You get the convenience of cloud sync with the security of client-side encryption. Perfect for storing client deliverables and contracts.
VPN: Mullvad. A VPN service that does not require an email address, name, or any personal information to sign up. You get a random account number and pay with cash, crypto, or card. No logging policy, independently audited, based in Sweden. For contractors working from coffee shops, coworking spaces, or client offices, a trustworthy VPN is essential.
Browser: Firefox with privacy extensions. Firefox remains the best mainstream browser for privacy. Add uBlock Origin for ad and tracker blocking, and you have a browsing experience that does not feed your activity into an advertising profile. For multi-client work, Firefox's container tabs let you isolate sessions by client without cross-contamination.
The missing piece: calendars
Notice what is missing from most privacy toolkit roundups? Calendar tools. Email gets encrypted. Messages get encrypted. Files get encrypted. But calendars, the structured metadata that reveals who you work with, when, and how often, get overlooked.
That is the gap manyCalendars fills. Local-first calendar aggregation with no server, no account, and no data leaving your browser. It is the calendar entry in your privacy-first stack. Add it to your toolkit. It is free, and your calendar data deserves the same protection as everything else.