Data Sovereignty in Practice: A Working Guide

It’s 11pm and you tap “Next.”

The new laptop hums, its setup wizard smiling at you through a wall of pre-ticked boxes. Location: on. Personalised ads: on. Diagnostic sharing: on. You just want your desktop, so you keep clicking — and each click feels like signing a contract nobody let you read.

Three days later it lands. That exact pair of running shoes you thought about once, in bed, never searched — now grinning at you from a news site you’ve never visited. Your smart TV blinks an ad for a car dealership four miles from your house.

A cold knot tightens in your stomach. You didn’t ask for this. You never agreed to it. Not knowingly.

The short version: Your devices are designed to spy on you by default, because your data is the product they sell. You reclaim privacy not by hiding, but by taking control — and the single highest-impact first move is changing your device’s DNS to a private provider like Quad9, a five-minute fix that blocks known trackers across every app at once.

Why your devices betray you: the default trap

That knot in your stomach? Not your fault. You’re not bad at tech. You’re not paranoid.

You’re feeling the symptom of a machine built to work against you. The villain isn’t a bad actor in a hoodie in some basement. It’s something far more ordinary — and far more effective: the deliberate engineering of default settings.

It’s a quiet betrayal baked into every operating system, every app, every “smart” thing you own. They ship from the factory tuned for maximum extraction. Location tracking, on. Ad personalisation, on. “Help us improve” telemetry, on.

Why?

Because your data — aggregated, bundled, resold in real time to the highest bidder — feeds an industry measured in hundreds of billions of dollars a year. You are the unpaid producer. The “recommended settings” are the factory floor.

Notice the asymmetry. The path to surveillance is one glowing button: Express Setup. The path to privacy is a maze of grey sub-menus buried four taps deep, worded to make you give up. That imbalance isn’t laziness. It’s design. Someone was paid to make opting out feel like too much work.

So you click Next. Everyone does. It feels too big to fight and too normal to question.

Until now.

What is data sovereignty? The one idea that changes everything

You’ve heard “digital privacy” and pictured a hermit in the woods, phone in tinfoil, paying for coffee in cash and flinching at CCTV. That image is a gift to the surveillance industry. It makes the problem feel absurd and the solution impossible, so you do nothing.

It’s a false choice. Here’s the reframe that changes the whole game:

Privacy isn’t about hiding from the world — it’s about controlling what your own devices say about you behind your back.

Read that again.

You’re not trying to vanish. You’re trying to become the gatekeeper. This is data sovereignty: the right and the ability to decide who learns what about you, and when.

The goal isn’t a fortress. It’s a moat — making your data expensive and annoying enough to harvest that the automated machine shrugs and rolls on to an easier target. Surveillance at this scale runs on efficiency. It feeds on the millions who click Next without thinking.

You’re about to raise your own price.

How to build your digital moat: a practical guide

This isn’t a security-expert boot camp. It’s relief, not homework. A handful of deliberate moves, easiest and highest-impact first. Do the first one and you’ve already started.

Change your DNS first: the 5-minute win that blocks trackers everywhere

Every time you open a website, your device asks a digital phonebook — the Domain Name System (DNS) — for the address. By default that phonebook is run by your Internet Service Provider, who can log and monetise every lookup you make. Every site. Every app. Silently.

We’re firing them.

Switch to a privacy-respecting DNS and you install a bouncer at the door of your internet traffic. It blocks thousands of known trackers, ad networks and malicious domains before the page even loads. This is the most powerful single step you can take because it works across every app on the device, not just your browser.

Do it now:
1. Find the setting: on your phone or computer, open Wi-Fi or network settings and look for “DNS” or “Private DNS.”
2. Choose a provider:
– Quad9 — simple, non-profit, security-focused. Server IP: `9.9.9.9`. On Android’s “Private DNS,” use the hostname `dns.quad9.net`.
– NextDNS — customisable, lets you block specific categories. Create a free account for a unique configuration ID.
3. Switch it: change “Automatic” to “Manual” (or “Private”) and enter the new address.

That’s it. Your whole device just got measurably harder to track. You’ll notice almost nothing — except fewer creepy ads and, often, a faster web. First brick in the moat. Laid.

Audit your app permissions: take back your phone

Your phone is a spy that fits in your palm. Time to put it back on your payroll. The rule: grant permissions with deliberate, stingy intent.

1. Location: open privacy settings and review every app with location access. Ask one question — does it need my location to do its actual job? A map app does, but only “While Using.” A game, a torch, a shopping app almost never does. Set them to “Never” or “Ask Next Time.” Be ruthless.
2. Microphone and camera: a call app needs your mic. A photo editor needs your library, not constant live camera access. Revoke the rest.
3. App tracking (iPhone): Settings → Privacy & Security → Tracking → turn off “Allow Apps to Request to Track.” One global No. On Android, open the Privacy Dashboard — a 24-hour timeline showing exactly which apps touched your mic, camera and location. Prepare to be surprised.
4. Notifications: these aren’t just noise. They’re bait — engineered to yank you back into the app so it can log more of you. Kill them for everything that isn’t a real human or a genuinely time-sensitive alert.

The trade-off: a weather app wanting rough location for a forecast is a fair swap. A puzzle game demanding precise location around the clock is not. Now you decide the difference.

Fortify your browser: your shield against web trackers

Your browser is the front line, and the default ones from Google, Microsoft and even Apple are shaped by their owners’ business models. Switch to a browser that works for you.

1. New browser: Brave blocks ads and trackers out of the box with zero setup. Firefox is non-profit, open-source, and highly configurable.
2. Add two free extensions (Firefox/Brave):
– uBlock Origin — the gold standard for blocking ads and the trackers hidden inside them.
– Privacy Badger — an EFF tool that learns to spot invisible trackers by their behaviour.
3. Change your search engine: swap Google for DuckDuckGo or Brave Search. They don’t build a profile of you.
4. Turn on DNS over HTTPS (DoH): in your browser’s security settings, find “Secure DNS” and enable it. This encrypts your DNS lookups so even your network can’t read your browsing — a second layer on top of the device-wide change.

The trade-off: occasionally a badly-built site chokes on aggressive blocking. One button in your browser drops shields for that one site. A tiny cost for a cleaner web.

Frequently asked questions

What if I still want to use Google or Facebook?

Sovereignty isn’t abstinence — it’s containment. Keep the services, but cage them. Open Facebook or Instagram only in a web browser, never their data-hungry apps. Use a Firefox “container” tab, or a separate browser reserved for those accounts, so their trackers can’t follow you across the rest of your day. And never, ever click “Log in with Google” or “Log in with Facebook” on another site — that button is a tracking handshake dressed up as convenience.

Will these changes make my internet slow or break websites?

No — usually the opposite. Your browsing will likely get faster. Ads and tracking scripts are heavy: they eat bandwidth, battery and processor cycles. Strip them out and pages load cleaner and quicker. The rare site that breaks tends to be so dependent on aggressive trackers that its stumble is really a confession — it wasn’t built to respect you in the first place.

Is it really true that “if a service is free, you’re the product”?

It’s a sharp rule of thumb, not a law. If a company’s income comes from advertising, its real customers are advertisers, and your attention and data are the goods on the shelf. But plenty of genuinely free tools — Free and Open Source Software like Firefox and uBlock Origin — are funded by donations, communities, or paid business tiers. So skip the slogan and ask the better question: what is the business model? If the answer is “personalisation,” you’re the currency.

What about smart speakers like Alexa or Google Home?

This is the deepest room of the default trap. Treat anything with a microphone or camera as if it’s always listening — because it frequently is. Before you buy, search the device name plus “privacy policy.” Once it’s home, park it on a separate Guest Wi-Fi network so it can’t see your laptops and phones. Open its app and switch off every permission and data-sharing toggle that isn’t strictly required. If there’s a physical mic-mute button, press it and mean it.

Secure your foundation: router, email, and passwords

A few last moves lock down the core.

1. Your router: the gateway for everything in your home. If it supports custom DNS, set Quad9 or NextDNS here — it protects every device on the network at once: phones, laptops, that chatty TV. While you’re in there, change the default admin password. It’s probably still “admin.”
2. Your email: the master key to your entire digital life. Move your important, sensitive accounts to a privacy-focused provider like ProtonMail. For everything else — shops, newsletters, one-off signups — use an alias service like SimpleLogin or AnonAddy. They generate disposable forwarding addresses, so when one gets spammed or data incidented, you delete it and your real inbox never notices.
3. Your passwords: the old advice still wins. A trusted password manager to generate and store a long, unique, random password for every site. Then turn on Two-Factor Authentication everywhere, using an authenticator app like Authy rather than easily-hijacked SMS.

The trade-off: learning a password manager or aliases costs you one afternoon. It repays you for the rest of your life — in silence from spammers, and in the specific calm of knowing one data incident can’t open everything else.

You are no longer the product

You changed your DNS. You pruned your permissions. You fortified your browser and caged the loud devices.

Feel that? The knot’s gone.

In its place, something quieter and harder: control. The machine runs on scale, and scale runs on easy targets — the millions still clicking Next in the dark. You just stepped out of that crowd. You made yourself expensive to watch.

They’ll move along to someone who didn’t read this.

This was never about paranoia. It was about power — the plain shift from being a product on a shelf to being the owner of the shelf. You didn’t leave the modern world. You unhacked your place inside it.

You’re the one who isn’t watched, isn’t milked, isn’t hijacked now. You’re sovereign.

And you’re only on the first brick.