If you care about smartphone privacy, running stock Android — or worse, a carrier-modified version of it — is a hard sell. Google’s telemetry, preloaded apps, and advertising identifiers are baked in at a level that no settings menu can fully remove. Two of the most respected privacy-focused Android distributions, CalyxOS and DivestOS, take very different approaches to solving this problem. Understanding those differences will help you pick the right tool for your threat model.

What Is CalyxOS?

CalyxOS is a privacy-focused Android distribution maintained by the Calyx Institute, a New York-based nonprofit. It is built on the Android Open Source Project (AOSP) and ships with microG — a free-software reimplementation of Google Play Services — enabled by default. This means apps that rely on Google APIs (push notifications, maps, in-app purchases) often work without modification.

Supported Devices

CalyxOS officially supports a relatively curated list of devices:

Google Pixels (Pixel 5 through Pixel 9 series) — best-supported tier
Motorola Edge 30 and moto g52 — more recently added
SHIFT6mq — a European privacy-focused phone

The project prioritizes long-term security support, so it only adds devices where verified boot (AVB) can remain enabled. Unlocking the bootloader and flashing CalyxOS is done through the device-flasher utility, which is comparatively beginner-friendly.

Key Features

microG pre-installed and active by default
Datura Firewall — per-app network access controls
Seedvault — encrypted, app-aware backup to local storage or cloud
Chromium-based Calyx Browser and Firefox included
Regular monthly security patches close to Pixel release schedules
F-Droid and Aurora Store (anonymous Google Play client) bundled

What Is DivestOS?

DivestOS is maintained by a solo developer (Tavi) and is explicitly positioned as a hardened, de-Googled ROM for a much wider range of devices, including many that manufacturers have abandoned. It is derived from LineageOS but applies a significant number of security patches and privacy-hardening changes on top.

Supported Devices

DivestOS supports over 200 device models, including:

Older Pixels (Pixel 2, 3, 3a, 4, 5, 6 series)
OnePlus devices (6, 6T, 7, 8 series)
Fairphone 2, 3, 4
Various Samsung, Xiaomi, and LG models

This breadth is DivestOS’s biggest practical advantage. If you have an older phone you want to give a second life with better privacy, there is a good chance DivestOS supports it. The tradeoff is that verified boot may not be re-lockable on many of these devices, which weakens hardware-level security guarantees.

Key Features

No microG by default — truly Google-free out of the box
Hardened kernel patches from upstream GrapheneOS and other projects
Network and sensor permission toggles at the OS level
Automatic patching of known CVEs even on otherwise abandoned devices
Mull browser (hardened Firefox fork) included
DNSCrypt support built into the system
Frequent updates, but update cadence depends on device tier

The Core Debate: microG vs. No Google

This is the most philosophically important difference between the two ROMs.

Feature	CalyxOS	DivestOS
Google Play Services	microG (stub)	None by default
Push notifications	Work via UnifiedPush or microG	Require UnifiedPush-compatible apps
Google Play apps	Via Aurora Store (anonymous)	Via Aurora Store (anonymous)
Tracking surface	Small (microG logs less)	Minimal
App compatibility	High	Moderate

microG is not Google Play Services — it does not send your data to Google the way the real GMS stack does. However, it does register a device token with Google’s servers for push notification delivery. If your threat model includes hiding from Google at the network level, microG is still a compromise. DivestOS’s approach of offering zero Google integration is cleaner from a pure privacy standpoint.

For most users, the question comes down to: do you need apps that require Google Play Services? If yes, CalyxOS is less friction. If you are comfortable curating a fully FOSS app stack, DivestOS gives you a smaller attack surface.

Privacy Tradeoffs at a Glance

Security Model

CalyxOS supports re-locking the bootloader on supported Pixel devices, which means verified boot is active — the phone will refuse to boot if the OS is tampered with. DivestOS can re-lock the bootloader on some devices but not all. On devices where re-locking is impossible, you are relying on software-level protections alone.

Update Longevity

CalyxOS tracks Android security patch levels very closely on Pixel hardware. DivestOS backports patches to older kernels — which is genuinely impressive engineering — but backported patches are not always complete, and older kernels carry architectural limitations.

Community and Support

CalyxOS has a funded nonprofit behind it, a broader community forum, and a more polished installation experience. DivestOS is effectively a one-person project, which raises bus-factor concerns but also means faster iteration on some features.

Which Should You Choose?

Choose CalyxOS if:

You are starting fresh with a Pixel device
You want app compatibility close to stock Android
You want a supported, beginner-accessible install process
You use Signal, WhatsApp, or apps that depend on push notifications
Long-term security patch support is a priority

Choose DivestOS if:

You have an older device not supported by CalyxOS
You want zero Google network contact
You are comfortable running a fully FOSS app ecosystem
You want a more aggressive hardening posture
You understand and accept the verified boot tradeoffs

Installation Overview

Both ROMs require an unlocked bootloader, which will factory reset your device. Back up everything first.

For CalyxOS, download the device-flasher from calyxos.org, plug in your Pixel, and run:

# On Linux/macOS
chmod +x device-flasher.linux
./device-flasher.linux

For DivestOS, installation is more manual. You will use fastboot and adb directly:

fastboot oem unlock
fastboot flash boot divestos-boot.img
fastboot flash system divestos-system.img
fastboot reboot

Consult the device-specific instructions at divestos.org before proceeding, as partition layouts differ significantly across models.

Final Verdict

Neither ROM is universally better — they solve different problems. CalyxOS offers a polished, supported experience with reasonable privacy for users who need app compatibility. DivestOS offers maximum de-Googling and broad device support for users willing to accept a steeper learning curve and some security tradeoffs. Both are dramatically better for privacy than stock Android.

If you own a supported Pixel and are new to custom ROMs, start with CalyxOS. If you are a more experienced user with an older device or a hard requirement for zero Google contact, DivestOS is the right call.