Your Email Is Being Read
#

Not by a human — by automated systems. But the result is the same: everything in your inbox, everything you send, is being analyzed and used to profile you for advertising.

Gmail, the world’s most popular email service, is operated by Google — an advertising company. Your emails are parsed for keywords, purchases, travel plans, medical information, and social connections. Google has stated it uses this data to “improve” its services, but “improve” in this context means “serve you more targeted ads and feed data into our broader surveillance apparatus.”

Microsoft’s Outlook and Hotmail do the same.

If your email account is compromised, your entire digital life is compromised — email is used to reset passwords on nearly every other account you have. It is the most important account to protect.

What Is Email “Metadata”?
#

Even if the content of your emails were encrypted, your metadata would still be visible: who you email, how often, at what times, from where. Metadata alone can reveal your doctor, your lawyer, your political affiliations, your relationships, and your daily routine.

Law enforcement and intelligence agencies often request metadata rather than content because it is so revealing — and courts have historically given it less legal protection than message content.

What We Recommend
#

ProtonMail — Best Privacy, Easiest to Use
#

Proton Mail is based in Switzerland and uses end-to-end encryption, meaning even Proton cannot read your emails (they do not hold the keys). It has a polished interface that looks and works like any other email provider, with apps for Android and iPhone and a web interface.

The free tier gives you one address and 1GB of storage, which is plenty to start. Paid plans add more storage, custom domains, and other features.

Key features:

End-to-end encryption between Proton users (automatic)
Zero-knowledge encryption for stored emails
Swiss privacy law protections
No ads, no profiling

Get it: proton.me

Note: End-to-end encryption only works automatically when you email another Proton user. When you email someone on Gmail, the email leaves Proton’s encrypted environment. You can still send encrypted messages to non-Proton users by setting a password on the email.

Tuta (formerly Tutanota) — Also Excellent
#

Tuta is a German provider with very similar protections to Proton Mail — end-to-end encryption, zero-knowledge, no ads. It is slightly less feature-rich but fully functional and free at the basic tier.

Get it: tuta.com

Making the Switch
#

Migrating email is the hardest of the privacy changes in this guide series because so many things are tied to your current address. Here is a practical approach:

Phase 1 — Create the new account. Set up your ProtonMail or Tuta account.

Phase 2 — Update critical accounts first. Change the email on your most important accounts: your password manager, banking, your phone carrier, government accounts. These are the accounts that matter most if compromised.

Phase 3 — Update as you go. When you log into other sites, change the email then. You do not need to switch everything at once.

Phase 4 — Forward and notify. Set up a forward from your old account to your new one, and over time notify your contacts of the new address. Give yourself several months.

Phase 5 — Let the old account die. You may never fully delete it (too many accounts linked to it), but you can stop using it for anything sensitive.

A Note on Gmail Specifically
#

If leaving Gmail feels overwhelming, at minimum:

Turn off Gmail’s smart features (Settings → General → Smart features and personalization → off). This limits (but does not eliminate) Google’s scanning of your content.
Use Gmail only for low-sensitivity correspondence and newsletters.
Use a private provider for anything sensitive — health, legal, financial, or personal communications.