On android i'd find a phone that can run lineage os, and enable it's privay guard, as well as running afwall and no root firwall (the former is a real firewall using iptables and requires a rooted phone, and the second works as firewall per ip and app working as a vpn interface on the device). You'll be amazed at the amount of crap sent out there by all them apps.