You think your phone sits quietly in your pocket. It doesn't. Right now, apps are sending little packets of data out to ad networks, analytics firms, and trackers — even when you're not using them.
You can see this yourself. No coding. No special hardware. Just five minutes.
Why this matters
Most privacy advice tells you to trust that an app is bad. This is different. You're going to watch the traffic with your own eyes. Once you see your weather app pinging a server in another country every two minutes, you can't un-see it. That's the moment most people start self-hosting.
The tool: a local DNS sinkhole
A DNS sinkhole sits between your devices and the internet. Every time an app asks "where is tracker-ads.com?", the sinkhole answers "nowhere" and blocks it. The bonus: it logs every request, so you get a live feed of who your apps are talking to.
The easiest one to run at home is Pi-hole. It runs on a $35 Raspberry Pi, an old laptop, or even a spare mini PC collecting dust.
Set it up in five steps
- Install Pi-hole. On any spare Linux machine, run
curl -sSL https://install.pi-hole.net | bash. The installer walks you through it. - Note the IP address it gives you at the end (something like
192.168.1.50). - Point one device at it. On your phone's Wi-Fi settings, change the DNS server to that IP. Just one phone for now.
- Open the dashboard. Visit that IP in a browser. You'll see a live query log.
- Do nothing for ten minutes. Lock your phone. Set it down. Then refresh the dashboard.
What you'll see
A wall of requests. Your phone, sitting idle, reaching out to domains like graph.facebook.com, app-measurement.com, and dozens of analytics endpoints. Apps you opened once last month are still checking in.
The Top Blocked Domains list is the gut punch. That's your data, leaving without permission, now caught and stopped.
Turn the test into protection
The test is the fix. Once Pi-hole runs, point your whole network at it instead of one phone. Change the DNS setting in your router and every device — TVs, tablets, laptops — gets cleaned automatically. No app installs on each device. No subscriptions.
Add a blocklist or two from the Pi-hole settings page (the default ones are solid) and you'll block 10–20% of all traffic on a typical home network. That's faster page loads and far less tracking, for free.
Your takeaway
Tonight, install Pi-hole on any spare machine, point one phone at it, and walk away for ten minutes. Come back and read the log. The proof of how much your devices leak is sitting in that dashboard — and so is the off switch.